New ransomware strain is creating new boot volumes
Cybersecurity researchers have uncovered a new ransomware strain that abuses Windows BitLocker to lock victims out of their devices.
As reported by BleepingComputer, Kaspersky dubbed the new ransomware ShrinkLocker because once it hits, it shrinks available non-boot partitions by 100 MB and creates new primary boot volumes of the same size. Then it uses BitLocker, a full disk encryption feature included with some versions of Microsoft Windows, to encrypt the files on the target endpoint.
It has so far been seen hitting government agencies, and firms in manufacturing and pharmaceuticals.Maximum damage
For the uninitiated, BitLocker is a legitimate Windows feature, designed to protect data by providing encryption for entire volumes.
