A new virus called StalinLocker is capable of wiping out all the data stored on a person’s computer, according to MalwareHunterTeam.
When activated, StalinLocker locks an infected computer and presents the owner with a notification featuring the portrait of Soviet leader Joseph Stalin; the owner than has about 600 seconds to input the correct code or the program will wipe out all data stored on the computer.
StalinLocker / StalinScreamer sample: https://t.co/turcpk4oVx
— MalwareHunterTeam (@malwrhunterteam) 14 мая 2018 г.
When run, it drops and plays in the background a file called "USSR_Anthem.mp3".
It gives 600+60 seconds to enter the key, else, it will wipe all it can (code for that on 2nd screenshot).@BleepinComputer @demonslay335 pic.twitter.com/bDpIKbS1ja
In order to deduce the correct code, one needs to take the current date (i.e., the date the virus was executed) and subtract 1922.12.30 (the date the treaty on the creation of the USSR was signed); the result needs to be converted into days before input.
There is no help on that picture about the key as I see…
— MalwareHunterTeam (@malwrhunterteam) 14 мая 2018 г.
See screenshot for how the key is calculated.
n = current date when the sample is executed
dt = 1922.12.30
So the key is: n — dt in days. pic.twitter.com/aRQbPZis9m
