"ShrinkLocker Ransomware Exploits BitLocker to Encrypt Files"
TL;DR Summary
A new ransomware strain called ShrinkLocker is exploiting Windows BitLocker to encrypt and steal files, primarily targeting government agencies and firms in manufacturing and pharmaceuticals. Unlike typical ransomware, ShrinkLocker does not drop a ransom note but instead uses email addresses as new boot partition labels for communication. It also deletes all BitLocker protectors, making recovery impossible without the attackers' key. The ransomware has affected organizations in Mexico, Indonesia, and Jordan.
- A new ransomware is hijacking Windows BitLocker to encrypt and steal files TechRadar
- 'ShrinkLocker' ransomware uses BitLocker against you — encryption-craving malware has already been used against governments Tom's Hardware
- Newly discovered ransomware uses BitLocker to encrypt victim data Ars Technica
- How ransomware abuses BitLocker Securelist
- New ShrinkLocker ransomware uses BitLocker to encrypt your files BleepingComputer
Reading Insights
Total Reads
0
Unique Readers
0
Time Saved
2 min
vs 3 min read
Condensed
83%
403 → 70 words
Want the full story? Read the original article
Read on TechRadar