Lilocked is a linux-targeted malware that encrypts files on a hard drive and then demands a ransom (ransomware).
According to ZDNet, the first reports of the malware appeared in mid-July, since then more than 6700 servers have been affected. Lilocked encrypts files HTML, HTML, JS, CSS, PHP, INI and various image formats, leaving system files untouched. Encrypted files get the extension .lilocked, a text note appears in each directory with such files #README.lilocked with a link to a site in the tor network, the link posted a demand to pay 0.03 BTC (about $325).
The penetration point of Lilocked into the system is currently unknown. Suspected connection with the recently closed critical vulnerability in Exim.
Source: linux.org.ru