NanoLocker is a ransomware that was first seen in the wild in early 2019. It is believed to be a variant of the Locky ransomware. NanoLocker uses the AES-256 encryption algorithm to encrypt files on the infected computer, it is the same encryption algorithm that Locky uses. NanoLocker is written in the Go programming language.
Once NanoLocker has encrypted a file, it will append the “.nano” extension to the encrypted file. For example, a file named “sample.jpg” would be renamed “sample.jpg.nano”.
NanoLocker will also create a text file named “!ReadMe!.txt” in each folder that contains encrypted files. This text file contains NanoLocker’s ransom demand. NanoLocker demands a ransom of 0.5 Bitcoin, which is currently worth approximately $3,500 USD. NanoLocker does not appear to be targeted at any specific geographical region or type of user.
Someone typically spread NanoLocker through spam emails that contain a malicious attachment. These attachments are usually Microsoft Word documents that have been infected with macro malware. When the macro is enabled, the NanoLocker ransomware will be downloaded and installed on the computer.
NanoLocker may also be spread through fake software updates, such as Adobe Flash Player updates, and through peer-to-peer (P2P) file-sharing networks.
It will encrypt most types of files on your computer, including documents, images, videos, and music files. NanoLocker will also encrypt some types of system files. However, NanoLocker will not encrypt files that are in the Windows “Startup” folder.
The biggest NanoLocker outbreak occurred in March 2019. This outbreak affected over 100,000 computers in 150 countries.
There are several steps you can take to prevent NanoLocker:
If NanoLocker is on your computer, you should take the following steps:
There is no guarantee that paying the ransom will decrypt your files. In some cases, victims who have paid the ransom have not had their files decrypted.
NanoLocker is a complex piece of malware, and attempting to remove it without the assistance of an IT professional could make matters worse.
There is no public decryption tool for NanoLocker. Even if you find a decryption tool online, it is likely that it is fake or will not work correctly.
NanoLocker uses a very strong encryption algorithm, making it extremely difficult to decrypt files without the encryption key. However, there are data recovery services that specialize in decrypting files encrypted by ransomware. These services may be able to decrypt your NanoLocker-encrypted files.
SalvageData Recovery Services is one such service. We have a success rate of over 96% in decrypting files encrypted by NanoLocker.
If you would like to learn more about our data recovery services, please visit our website or contact us at +1 (800) 972-3282. We are happy to help you 24/7/365.
Thank you for choosing SalvageData!
Recovery mode is a crucial feature for troubleshooting and restoring an iPad when it encounters…
Whether you’re a professional juggling important work documents or an individual cherishing irreplaceable memories, safeguarding…
It's not uncommon to encounter issues where an external drive is not showing up on…
When restoring your iPhone from a backup, you may discover it is corrupted or incomplete.…
Backup and remote wiping procedures are two critical components of data security and management for…
VMware is a leading virtualization and cloud computing software provider. Its core technology allows multiple…