| https://cisoclub.ru/doc/otchet-kompanii-group-ib-ransomware-uncovered-2020-2021/?bp-attachment=group-ib_ransomware_uncovered_2020-2021.pdf |
| https://docs.google.com/spreadsheets/d/1MI8Z2tBhmqQ5X8Wf_ozv3dVjz5sJOs-3 |
| https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2021GTR.pdf |
| https://id-ransomware.blogspot.com/2019/10/pwndlocker-ransomware.html |
| https://medium.com/s2wlab/operation-synctrek-e5013df8d167 |
| https://news.sophos.com/en-us/2020/07/27/prolock-ransomware-gives-you-the-first-8-kilobytes-of-decryption-for-free/ |
| https://norfolkinfosec.com/tinypos-and-prolocker-an-odd-relationship/ |
| https://raw.githubusercontent.com/fboldewin/When-ransomware-hits-an-ATM-giant---The-Diebold-Nixdorf-case-dissected/main/When%20ransomware%20hits%20an%20ATM%20giant%20-%20The%20Diebold%20Nixdorf%20case%20dissected%20-%20Group-IB%20CyberCrimeCon2020.pdf |
| https://soolidsnake.github.io/2020/05/11/Prolock_ransomware.html |
| https://web.archive.org/web/20210305181115/https://cisoclub.ru/doc/otchet-kompanii-group-ib-ransomware-uncovered-2020-2021/?bp-attachment=group-ib_ransomware_uncovered_2020-2021.pdf |
| https://www.bleepingcomputer.com/news/security/new-pwndlocker-ransomware-targeting-us-cities-enterprises/ |
| https://www.bleepingcomputer.com/news/security/pwndlocker-ransomware-gets-pwned-decryption-now-available/ |
| https://www.cert-pa.it/notizie/pwndlocker-si-rinnova-in-prolock-ransomware/ |
| https://www.cert.ssi.gouv.fr/cti/CERTFR-2021-CTI-009/ |
| https://www.cert.ssi.gouv.fr/uploads/CERTFR-2021-CTI-009.pdf |
| https://www.cronup.com/post/de-ataque-con-malware-a-incidente-de-ransomware |
| https://www.cyborgsecurity.com/cyborg_labs/hunting-ransomware-inhibiting-system-backup-or-recovery/ |
| https://www.group-ib.com/blog/prolock |
| https://www.group-ib.com/blog/prolock_evolution |
| https://www.hornetsecurity.com/en/security-information/qakbot-malspam-leading-to-prolock/ |
| https://www.hornetsecurity.com/en/threat-research/qakbot-reducing-its-on-disk-artifacts/ |
| https://www.intrinsec.com/egregor-prolock/ |
| https://www.it-klinika.rs/blog/paznja-novi-opasni-ransomware-pwndlocker-i-u-srbiji |
| https://www.pwc.co.uk/issues/cyber-security-services/insights/what-is-behind-ransomware-attacks-increase.html |
| https://www.zdnet.com/article/fbi-prolock-ransomware-gains-access-to-victim-networks-via-qakbot-infections/ |
| https://www.zdnet.com/article/the-malware-that-usually-installs-ransomware-and-you-need-to-remove-right-away/ |
