"ShrinkLocker Ransomware Exploits BitLocker to Encrypt Data"

TL;DR Summary
A new ransomware called ShrinkLocker uses Windows' BitLocker feature to encrypt victim data, targeting systems in Mexico, Indonesia, and Jordan. Discovered by Kaspersky, ShrinkLocker shrinks non-boot partitions and creates new primary partitions, then disables BitLocker protections and generates a complex encryption key. Kaspersky advises robust endpoint protection, minimal user privileges, and frequent offline backups to mitigate risks.
- Newly discovered ransomware uses BitLocker to encrypt victim data Ars Technica
- 'ShrinkLocker' ransomware uses BitLocker against you — encryption-craving malware has already been used against governments Tom's Hardware
- Here's yet more ransomware using BitLocker against Microsoft's own users The Register
- How ransomware abuses BitLocker Securelist
- New ShrinkLocker ransomware uses BitLocker to encrypt your files BleepingComputer
Reading Insights
Total Reads
0
Unique Readers
0
Time Saved
4 min
vs 4 min read
Condensed
93%
789 → 57 words
Want the full story? Read the original article
Read on Ars Technica