The Proton/Shinra v3 (.bricks) Variant: Bricks Decryptor and Recovery
In our recovery lab today at Lockbit Decryptor, we isolated the Bricks ransomware strain, a confirmed member of the Proton family. This variant appends the .bricks extension along with a victim’s email address and employs a double-extortion model. Our forensic analysis indicates that despite their claims of impenetrable encryption and warnings against third-party recovery, the…


