Kaspersky has identified ransomware attacks using Microsoft’s BitLocker to attempt encryption of corporate files.

The threat actors remove the recovery options to prevent the files from being restored and use a malicious script with a new feature: it can detect specific Windows versions and enable the BitLocker according to the Windows version.

The incidents with this ransomware, dubbed “ShrinkLocker”, and its variants were observed in Mexico, Indonesia, and Jordan. The perpetrators targeted companies in steel and vaccine manufacturing, and a government entity.

The threat actors are using VBScript – a programming language used to automate tasks on Windows computers – to create a malicious script with previously unreported features to maximise the damage of the attack, Kaspersky Global Emergency Response team reports.

The novelty is that the script checks the current version of Windows installed on the system and enables the BitLocker features accordingly. In this way, the script is believed to be able to infect new and legacy systems back to Windows Server 2008.

In case the OS version is suitable for the attack, the script alters the boot settings and attempts to encrypt the whole drives using BitLocker.

It establishes a new boot partition, essentially setting up a separate section on the computer’s drive containing the files for booting the operating system.

This action is aimed at locking the victim out at a later stage. The attackers also deleted the protectors used to secure BitLocker’s encryption key so that the victim can’t recover them.

The malicious script then sends information about the system and the encryption key generated on the compromised computer to the server controlled by the threat actor. Afterward, it covers its tracks by deleting logs and various files that serve as a hint and help to investigate an attack.

As a final step, malware forces the shutdown of the system – a capability facilitated by the creation and reinstallation of files in a separate boot partition. The victim sees the BitLocker screen with the message: “There are no more BitLocker recovery options on your PC”.

Kaspersky dubbed the script “ShrinkLocker” as this name highlights the critical procedure of partition resizing, which was essential for the attacker to ensure the system booted correctly with the encrypted files.

“What is particularly concerning about this case is that BitLocker, originally designed to mitigate the risks of data theft or exposure, has been repurposed by adversaries for malicious ends.

“It’s a cruel irony that a security measure has been weaponised in this way. For companies using BitLocker, it’s crucial to ensure strong passwords and secure storage of recovery keys. Regular backups, kept offline and tested, are also essential safeguards,” explains Cristian Souza, Incident Response Specialist at Kaspersky Global Emergency Response Team.

Konga, the multiple award-winning composite e-commerce group, has once again made a significant mark on the global stage. The retail powerhouse has been honored with the prestigious Retail Supplies Partner of the Year 2023 award by global technology giant, HP. The award recognizes Konga’s excellence and solidifies its position as a trusted leader in Nigeria’s digital marketplace.

One of Konga’s key strengths lies in its strategic partnerships with global brands like Apple, Samsung, HP, Lenovo, Starlink, L’Oreal, Haier Thermocool, LG, and Nexus. By collaborating with industry leaders, Konga is able to offer shoppers access to a diverse selection of products from trusted brands, ensuring that they can find exactly what they need at unbeatable prices. The Retail Supplies Partner of the Year award from HP is a testament to the success of these partnerships and Konga’s commitment to providing customers with the best possible shopping experience.

Since the Zinox Group acquired Konga from Naspers in 2018, Konga has undergone a transformative journey, emerging as an industry leader in e-commerce. The brand’s commitment to empowering Nigerian shoppers with genuine tech products at unbeatable prices has been unwavering.

This commitment is exemplified by the massive discounts offered during various sales campaigns such as Berekete Extravaganza, Konga Jara, Tech Month, and the ongoing Mid-Year Shopping Festival.

One of the hallmarks of Konga’s success has been its relentless pursuit of customer satisfaction. The company goes above and beyond to ensure every shopper has a positive experience, from fast and reliable delivery to responsive customer support.

Konga has invested heavily in building a robust logistics network, ensuring efficient and timely delivery of products across Nigeria. This commitment to excellence has earned Konga a loyal customer base and solidified its reputation as a trusted leader in the e-commerce space.

As Konga continues to set new standards in the e-commerce landscape, the company remains focused on expanding its offerings, enhancing customer experience, and fostering more strategic partnerships to elevate the retail experience for Nigerian consumers. The Retail Supplies Partner of the Year 2023 award is a testament to Konga’s unwavering commitment to excellence and innovation.

Konga’s receipt of the Retail Supplies Partner of the Year 2023 award from HP affirms the company’s position as a trailblazer in Nigeria’s e-commerce industry. With a relentless pursuit of excellence, strategic partnerships, and a customer-centric approach, Konga has not only transformed into an industry leader but has also significantly contributed to the growth and development of the retail sector in Nigeria.

Mitchell Elegbe, the Founder and Group Managing Director of Interswitch Group has been appointed into the global jury of the Ernst & Young (EY) World Entrepreneur of The Year Awards, which takes place annually in June in Monte Carlo, Monaco, France.

According to EY, the World Entrepreneur of the Year Hall of Fame is an elite corps of men and women who have been recognized for their exceptional entrepreneurial achievements.

For 38 years, since 1986, EY has been celebrating ingenuity through the Entrepreneur of the Year program. The program has recognized more than 10,000 outstanding entrepreneurs for their vision, innovation, courage, and leadership in building and growing successful businesses — businesses that influence the way people live, the products and services we depend on, and the economic vibrancy of our local communities and global markets.

In June 2023, Elegbe, alongside 48 other accomplished entrepreneurs from 45 countries across the world were inducted into the 2023 WEOY Hall of Fame With Interswitch’s Elegbe holding the unique distinction of being the only black and African global finalist and inductee into the coveted hall of fame, as well as the only entrepreneur in the 38-year history of the awards to have won in both the emerging and master categories at various times in their region (West Africa).

For the 2024 edition, he was invited by EY’s global leadership to join the global jury being 1 of 9 former finalists who form the judging committee for the 2024 global awards of the initiative, holding this week in Monte Carlo, Monaco. The 2029 jury is made up of entrepreneurs drawn from Argentina, Australia, Belgium, India, Poland, Nigeria (Elegbe), The United Kingdom, The USA and South Korea.

Elegbe is widely regarded as one of the pivotal architects of Nigeria’s payment innovation revolution, and has gained acclaim globally for his contributions as an exceptional African entrepreneur, who has contributed in no small measure to the economic development of Nigeria and Africa as a whole, having distinguished himself in business leadership and technology development.

A multiple award-winning professional and a renowned business leader in the Information Technology and Financial Services industry, he has won several awards, some of which include Harvard Business School Association (Nigeria) Leadership Award in the General Management Category; African Banker Awards 2019 as the African Banker Icon; CNBC/Forbes All African Business Leader (AABLA) Awards for West Africa as well as Financial Technology (Fintech) Africa Awards, Payments and Transfer category in 2016, among other deserving recognitions.

He is also a Bishop Desmond Tutu Fellow of the African Leadership Institute, an Endeavor Entrepreneur and also a member of the Board of Endeavor in Nigeria.

Mitchell Elegbe founded Interswitch in 2002 to provide a solution to problems associated with payments in Nigeria and has since led the company to consolidated growth as a leading payment and digital commerce company that helps to build and manage payment infrastructure and provides robust technology-based solutions to individuals, financial institutions, and governments across Africa.