SLocker

SLocker is a low-quality piece of ransomware that goes after Android devices exclusively. Unlike high-profile ransomware families that encrypt a large portion of the victim's data, this one is limited severely when it comes to functionality. In fact, SLocker is incapable of damaging files since it does not contain a working file-encryption module – instead, all it does is to display a lock screen that may prevent you from accessing your home screen or applications. Of course, this is not a minor issue since it may often render the device impossible to use. If the unlock code is not recovered, users might have to use advanced malware removal techniques to get their Android device back to normal.

SLocker Does not Encrypt Files – It will Just Lock Your Home Screen

Although SLocker has been around for nearly three years, it has not been a very active malware family. However, it seems that an unknown threat actor from Uzbekistan has released a variant that targets Uzbek users recently. The threatening application was found on the Google Play Store under the name 'Koronavirus Haqida' – the Uzbek name translates to 'About Coronavirus,' so it is clear that the attacker has opted to take advantage of the panic surrounding the COVID-19 outbreak.

Users who end up download and running the fake application may be asked to provide it with a lot of permissions that applications of this sort should not need – however, many users are unlikely to pay attention to this, and they may end up allowing the threatening SLocker to take over their devices. The new variant has not been improved at all, and it uses a hardcoded unlock key that cybersecurity experts were able to recover.

SLocker's Unlock Key was Recovered by Malware Researchers

After the attack is completed, SLocker will display a lock message that prevents the victims from accessing their device's home screen. The message is in Uzbek, and it asks the victims to purchase an unlock key by calling the number ' +998 99 891 03 12.' Surprisingly, this number also is the unlock key – victims of this new SLocker variant can enter the code '998 99 891 03 12' to unlock their phone or tablet.

Unlocking your device is only a partial solution, and you will still need to take additional steps to eliminate the threatening application. You can do this by using a reliable Android security product.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to SLocker may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.