Mobile Spy Apps

Beware of the many forms of Ransomware


Ransomware has proven to be a big problem for large and small companies. It can attack your data in many ways and lead to the complete cessation of your business.

In many cases, restoring access to and use of pirated information can cost hundreds of thousands or millions of dollars.

According to the Chainanalysis 2021 Crypto Crime Report, the total amount paid by ransomware victims has increased by 311% in 2020 to reach a cryptocurrency worth nearly $ 350 million (the most popular form of payment) and the problem will continue to growing.

Overall, the best defense against a ransomware attack is a good offense. Understanding the different forms of ransomware can help a company prepare for infiltration. Here are some tips to help you deal with all kinds of cybercriminals.

First, for those unfamiliar with ransomware, it is a virus that silently encrypts user data on their computer. It can infiltrate your system and deny access to key information, hindering or shutting down all business.

After the intruder has stolen and encrypted the data, a message may appear asking you to pay a certain amount to restore access to the information. The victim only has a certain amount of time to pay the cybercriminal. If the term expires, the ransom may be increased.

Some types of ransomware have the ability to search for other computers on the same network to infect. Others infect their hosts with more malware, which can lead to login credentials. This is especially dangerous for sensitive information, such as passwords for bank and financial accounts.

The two main types of ransomware are called Crypto ransomware and Locker ransomware. Crypto ransomware encrypts various files on a computer so that the user does not have access to them. Locker ransomware does not encrypt files. Rather, he “locks” the victim from her device, preventing them from using it. After blocking access, he urges the victim to pay money to unlock his device.

There have been many well-known ransomware cyberattacks in the last few years. They include …

WannaCry in 2017. It spread to 150 countries, including the United Kingdom. It is designed to manipulate a Windows vulnerability. By May of that year, he had infected more than 100,000 computers.

The WannaCry attack affected many hospitals in the UK, costing the NHS around £ 92 million. Users were blocked and a ransom was requested in the form of bitcoin. The attack revealed the problematic use of outdated systems. The cyberattack caused global financial losses of about $ 4 billion.

Ryuk is an attack on ransomware that spread in mid-2018. It disables the option to restore the Windows system to computer computers. Without backup, it was impossible to recover files that were encrypted. It also encrypts network devices. Many of the target organizations were in the United States. The ransoms demanded have been paid, and the expected loss is $ 640,000.

KeRanger is believed to be the first ransomware attack to successfully infect Macs running on the OSX platform. It was installed in a BitTorrent open source client installer, also known as Transmission. When users downloaded the infected installer, their devices became infected with the ransomware. The virus stays idle for three days and then encrypts approximately 300 different file types. It then downloads a file that includes a ransom, requires a bitcoin, and provides instructions on how to pay the ransom. After the ransom is paid, the victim’s files are decrypted.

As ransomware becomes more complex, the methods used to distribute it are also becoming more complex. Examples include:

Payment for installation. This is aimed at devices that are already compromised and can be easily infected by ransomware.

Drive-by downloads. This redemption software is installed when a victim unknowingly visits a compromised website.

Links in emails or social media messages. This method is the most common. Malicious links are sent in emails or online messages that victims can click on.

Cybersecurity experts agree that if you are the victim of a ransomware attack, do not pay the ransom. Cybercriminals can still keep your data encrypted, even after payment, and demand more money later.

Instead, back up all data to an external device or to the cloud so that it can be easily recovered. If your data is not backed up, contact your Internet security company to see if it offers a decryption tool for this type of circumstance.

Managed service providers can perform cost-free risk analysis and identify company safety risks.

Understanding vulnerabilities for possible intrusion and preparing for them in advance is the best way to stop a cyber thief from wreaking havoc on your company.


Source by George Rosenthal

Leave a Reply

Your email address will not be published. Required fields are marked *

Back to top button