New ransomware installs in boot record, encrypts hard disk

[Chiefcrowe]

http://arstechnica.com/security/2016/03/new-ransomware-installs-in-boot-record-encrypts-hard-disk

 

[Elixer]

This is the same one... http://forums.anandtech.com/showthread.php?t=2468337

 

[mikeymikec]

Out of curiosity, has anyone read whether this malware can infect Win8x/10 with secure boot enabled?

 

[Elixer]

Secure boot is only for loading, so, once system boots, this malware can install a new boot loader.
Though, on some motherboards, there is a BIOS option to prevent writing to the boot sector (but, then again, the damage is already done, this malware just writes a new boot loader to display the message)

 

[mikeymikec]

Yes, but the information about this malware suggests that it installs a new MBR, which presumably has to be UEFI compatible?