LockerGoga, the malware that took down Norsk Hydro last week, has taken industrial world by storm. Researchers are still looking for answers when it comes to how the malware first infects the system it targets, who is behind the attacks and what they want. The initial infection was thought to be a phishing attack, but seems like a less likely scenario as no phishing emails have been reported, researchers said. Researchers have identified 31 ransomware samples that are similar in behavior and code to the initial variant.
Source: https://threatpost.com/lockergoga-ransomware-norsk-hydro-wiper/143181/