I'm reading a Microsoft report examining the most prevalent ransomware families as of recent.

On the news, I've heard of CryptoLocker, CryptoWall and TeslaCrypt, but I don't see any of them mentioned by name. Only the "family" is marked there.

What is the family > brand correspondence here?

BTW, here's an McAfee article on TeslaCrypt, stating that it looks like CryptoLocker, without actually being the same thing.

1 Answer 1


CryptoLocker was taken down in 2014. Some copycat ransomware developers have chosen to imitate it, but the original CryptoLocker is gone. TeslaCrypt, CryptoWall etc. are all different strains of ransomware.

However, because of the aforementioned copying of CryptoLocker's name and because it was the first ransomware to be widely succesfull, some media continue to refer to all ransomware as "CryptoLocker" even though the different ransomware strains aren't based off its code.

Edit: after comparing the description of TesCrypt given by Microsoft to the Bleeping Computer TeslaCrypt ransomware FAQ & removal guide I can confirm that TesCrypt = TeslaCrypt. The same goes for Crowti; Microsoft lists Cryptowall as an alternate name. (I hate it that many AV vendors come up with different names for the same malware, it makes life more difficult for no good reason.)

  • @Agostino see the update to my post. May 5, 2017 at 11:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.