Connect with us

E-Business

Experts Identify New Ransomware Using BitLocker to Encrypt Corporate Data

Published

on

Kindly share this post

Kaspersky has identified ransomware attacks using Microsoft’s BitLocker to attempt encryption of corporate files.

The threat actors remove the recovery options to prevent the files from being restored and use a malicious script with a new feature: it can detect specific Windows versions and enable the BitLocker according to the Windows version.

The incidents with this ransomware, dubbed “ShrinkLocker”, and its variants were observed in Mexico, Indonesia, and Jordan. The perpetrators targeted companies in steel and vaccine manufacturing, and a government entity.

The threat actors are using VBScript – a programming language used to automate tasks on Windows computers – to create a malicious script with previously unreported features to maximise the damage of the attack, Kaspersky Global Emergency Response team reports.

The novelty is that the script checks the current version of Windows installed on the system and enables the BitLocker features accordingly. In this way, the script is believed to be able to infect new and legacy systems back to Windows Server 2008.

In case the OS version is suitable for the attack, the script alters the boot settings and attempts to encrypt the whole drives using BitLocker.

It establishes a new boot partition, essentially setting up a separate section on the computer’s drive containing the files for booting the operating system.

This action is aimed at locking the victim out at a later stage. The attackers also deleted the protectors used to secure BitLocker’s encryption key so that the victim can’t recover them.

The malicious script then sends information about the system and the encryption key generated on the compromised computer to the server controlled by the threat actor. Afterward, it covers its tracks by deleting logs and various files that serve as a hint and help to investigate an attack.

As a final step, malware forces the shutdown of the system – a capability facilitated by the creation and reinstallation of files in a separate boot partition. The victim sees the BitLocker screen with the message: “There are no more BitLocker recovery options on your PC”.

Kaspersky dubbed the script “ShrinkLocker” as this name highlights the critical procedure of partition resizing, which was essential for the attacker to ensure the system booted correctly with the encrypted files.

“What is particularly concerning about this case is that BitLocker, originally designed to mitigate the risks of data theft or exposure, has been repurposed by adversaries for malicious ends.

“It’s a cruel irony that a security measure has been weaponised in this way. For companies using BitLocker, it’s crucial to ensure strong passwords and secure storage of recovery keys. Regular backups, kept offline and tested, are also essential safeguards,” explains Cristian Souza, Incident Response Specialist at Kaspersky Global Emergency Response Team.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Firm Identifies Global Scam Activity Linked to the Release of Avatar 3

Published

on

Kindly share this post

The premiere of Avatar 3 has taken place in several countries and has been accompanied by a noticeable increase in online interest. Amid the heightened attention surrounding the release, Kaspersky experts identified an increase in cyber-scam campaigns that exploit the movie’s launch and users’ desire to watch it online. The fraudulent websites target users across multiple regions, indicating attempts by attackers to reach a global audience.

The scam operates as follows: cybercriminals create suspicious websites that offer online access to the Avatar 3 movie. Attackers place particular emphasis on localisation, publishing the sites in multiple languages to attract users from different countries. However, the translations are often poorly executed and contain grammatical errors and inconsistencies, which may serve as indicators of fraudulent activity.

When users attempt to start the video, they are presented with a fake media player and prompted to register in order to obtain “full” or “unlimited” access to the film. As part of the registration process, users are asked to provide personal information, including an email address and mobile phone number.

At later stages, scammers may request additional data, including payment details, under the guise of activating a “free trial.” This creates risks of credential compromise, particularly if users reuse passwords across multiple services, and may also lead to financial losses.

“Cybercriminals consistently exploit major movie premieres to capture users’ attention and increase the effectiveness of their schemes. We advise accessing films only through official platforms and exercising caution when encountering websites that request personal or payment information. It is also important to use reliable security solutions to protect all devices, including mobiles,” comments Olga Altukhova, Senior web content analyst at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

Galaxy Backbone Celebrates the Federal Government’s Paperless Civil Service Milestone

Published

on

Kindly share this post

Galaxy Backbone (GBB) aligns with and celebrates the successful announcement by the Office of the Head of the Civil Service of the Federation on the achievement of a Paperless Civil Service, a significant milestone in Nigeria’s public sector reform and digital transformation agenda.

The milestone was formally highlighted at a press briefing led by the Head of the Civil Service of the Federation, Mrs. Didi Esther Walson-Jack, who commended Galaxy Backbone for its sustained support and contribution throughout the implementation of the programme.

GBB has played a critical role in enabling this transition by providing secure, scalable, and shared digital infrastructure that supports the digitisation of government processes across Ministries, Departments and Agencies (MDAs). Through the 1Government Cloud, MDAs have been empowered to migrate from paper-based workflows to digital platforms, improving efficiency, collaboration, data security, and service delivery across the Federal Civil Service.

In addition, GovMail, GBB’s secure government email platform, has strengthened official communication, enhanced records management, and reinforced cybersecurity standards—key pillars in sustaining a paperless operating environment.

Galaxy Backbone acknowledges the collective efforts of the Office of the Head of the Civil Service of the Federation, Permanent Secretaries, Directors of ICT, consultants, partners, and dedicated public servants whose commitment and collaboration ensured the smooth delivery of this initiative.

The Managing Director/Chief Executive Officer of Galaxy Backbone, Prof. Ibrahim Adeyanju, was represented at the press briefing by Akintayo Bamisaye, Acting Group Head, Research, Digital Innovation and Skills Department (RDIS).

GBB describes the achievement as a strong close to 2025 and reaffirms its commitment to supporting the Federal Government in building a modern, efficient, and digitally enabled public service.


Kindly share this post
Continue Reading

E-Business

Jumia CEO says Black Friday Signals Nigeria’s E-Commerce Maturity

Published

on

Kindly share this post

At the close of 2025, Temidayo Ojo, the CEO of Jumia Nigeria, reflected on a year-end shopping season that points to the growing maturity of the country’s e-commerce market. “Black Friday is no longer a single, short-lived spike in activity,” he said.

“It has become a familiar, anticipated moment in the retail calendar, where consumers shop deliberately and with confidence.”

Preliminary KPIs for the two months ended November 30, 2025, show strong year-on-year growth in both orders and Gross Merchandise Value (GMV), with GMV growth outpacing order growth. This indicates that customers are placing fuller, more considered baskets rather than shopping in fragmented transactions. Nigeria ranked among Jumia Group’s better-performing markets, with engagement remaining steady throughout the Black Friday period rather than spiking briefly and tapering off.

A key factor behind this performance is the growing familiarity of consumers with online shopping. Customers are increasingly leveraging platform features such as saved carts, brand stores, and price comparison tools to plan purchases in advance. This trend suggests that digital commerce is becoming embedded in everyday habits rather than being viewed as a one-off event.

Ojo also highlighted the role of Jumia’s JForce network in connecting digital commerce to local communities. “Our agents are critical to ensuring that customers across Nigeria, including secondary cities and smaller communities, have access to variety, consistent pricing, and reliable delivery,” he said. “During peak periods like Black Friday, JForce agents can respond faster, serve more customers efficiently, and build stronger local relationships. This isn’t just a distribution channel—it’s a pathway to sustainable income and inclusion.”

Reflecting on the overall performance, the CEO concluded: “What we’re seeing this year-end is steady engagement across categories, stronger consumer confidence, and partners like our JForce agents benefiting from increased activity.

“It confirms that Nigeria’s e-commerce ecosystem is maturing, growing in a more structured and resilient way. As the December Holiday Sale continues, we expect these patterns of familiarity, trust, and participation to sustain momentum and drive both commerce and community impact across the country.”


Kindly share this post
Continue Reading

Trending