AXLocker ransomware doesn't change files' extensions

AXLocker is a ransomware that was found by malware researcher ‘S!ri,’ who posted it on Twitter. Later, it was discovered that AXLocker does not only encrypt files but also steals victims’ Discord credentials and uploads them to its own Discord server. Specifically, the AXLocker ransomware steals tokens stored on a local computer when the user logs in to Discord. It’s not packed or obfuscated.

Locky Ransomware now using the Aesir Extension for Encrypted Files

Security Vulnerability in WinRAR Allows Hackers to Execute Programs via Opening RAR Archives

AXLocker ransomware doesn't change files' extensions

Researchers Found Cylance Ransomware Targeting Linux and Windows Systems

How to Fix Virus Has Changed All File Extensions on Windows PC? - MiniTool

Cyble — AXLocker, Octocrypt, and Alice: Leading a new wave of Ransomware Campaigns

Virus has changed all file extensions on my Windows 10 PC

Researchers Disclosed About High-Severity Format String Vulnerability Present in F5 BIG-IP

AXLocker Ransomware Removal & Decryption