Kaspersky Lab experts have discovered ShrinkLocker, a new ransomware virus that blocks Windows computers. The virus uses BitLocker technology designed to protect data, but in this case it serves attackers. SecureList reports that ShrinkLocker works on Windows Vista, Windows Server 2008, and later versions of the operating system, but does not affect older versions.
Once infected, the virus runs BitLocker, encrypts the data, and creates a new encryption key that is sent to hackers. The computer then reboots and the user loses access to all data. The new boot partition is named after the hacker’s email so the victim can contact him and pay a ransom to unlock it.
Kaspersky Lab has not yet been able to identify the source of the attacks. It is known that the attackers’ aim is not only to obtain ransom, but also to disrupt systems and destroy data. ShrinkLocker is currently being used to attack the IT infrastructure of companies and government agencies in Mexico, Indonesia, and Jordan.
Source: Ferra
I am a professional journalist and content creator with extensive experience writing for news websites. I currently work as an author at Gadget Onus, where I specialize in covering hot news topics. My written pieces have been published on some of the biggest media outlets around the world, including The Guardian and BBC News.
