Locky is considered one of the most persistent and destructive ransomware campaigns. The latest Locky strain began appearing on Oct. 11 and goes by the.asasin extension. It is collecting information on users’ computers such as the operating system used, IP address, and other such information. The intent of Locky’s reconnaissance isn’t fully clear, but its ability to collect information on infected Windows versions could help its authors determine which OS version is the most susceptible to its attacks, says PhishMe threat intelligence manager.”]
Source: https://www.darkreading.com/attacks-breaches/new-locky-ransomware-strain-emerges