System Update
Understanding ShrinkLocker Ransomware and Protecting Your Business
Among the never-ending torrent of cybersecurity threats, a new ransomware strain known as ShrinkLocker has emerged, targeting businesses still operating on older Windows systems. This malicious software utilizes Visual Basic Scripting to encrypt corporate systems, leaving companies vulnerable to data loss and operational disruption.
ShrinkLocker has successfully attacked government, manufacturing, vaccine establishments, and more, who are using Windows Vista or older. In those cases, it has encrypted non-boot partitions of the hard drive, which frequently contain valuable company data. It does this by using Microsoft’s built-in BitLocker encryption to encrypt the company data, then it removes BitLocker recovery options effectively locking victims' data, making a recovery difficult to impossible. At this point, ShrinkLocker notifies the computer user and holds the encrypted data for ransom.
The good news is that by implementing some specific strategies, you can ensure that ShrinkLocker and similar threats won’t compromise your business’s security. To safeguard your business against such threats, it’s crucial to take proactive steps:
I've put together three takeaways and next steps:
1. Update Your Systems
If you follow the CyberStreams system update, you know that patch management is a common recommendation. But in this case, the issue at hand is that the victims are using operating systems that are so old that Microsoft isn’t even making patches for them anymore. Windows 10 will become end-of-life on October 14, 2025, a few months after turning 10 years old, at which point support, patches, and security updates will no longer be available. All previous Windows operating systems are already end-of-life. So, if you’re not already on Windows 11, now is the time to plan your upgrade path.
2. Enhance Security Layers
Two services that will help protect and recover your data from ShrinkLocker are backups and endpoint detection & response (EDR). So, ensure that you have a backup system that is designed, configured, and monitored for success to back up your company’s most important data. But backups are the best last line of defense. In order to prevent disruption of operations, ensure that you have an EDR system in place that will specifically monitor for and protect against VBS & PowerShell-based threats.
3. Employee Awareness Training
Educate your staff on the dangers of phishing and other cyber threats to minimize human error. ShrinkLocker and other malware often rely on deceptive emails or links to trick users into downloading or executing malicious code. By training your employees on how to spot and avoid phishing attempts, you can reduce the risk of falling victim to ShrinkLocker and similar attacks.