Ransomware???💥😨💥
Ransomware is a type of malware that prevents or limits users from accessing their system, either by locking the system's screen or by locking the users' files unless a ransom is paid. More modern ransomware families, collectively categorized as crypto-ransomware, encrypt certain file types on infected systems and forces users to pay the ransom through certain online payment methods to get a decrypt key
Ransomware malware can be spread through malicious e-mail attachments, infected software apps, infected external storage devices and compromised websites. In a lockscreen attack, the malware may change the victim’s login credentials for a computing device. In a data kidnapping attack, the malware may encrypt files on the infected device as well as other connected network devices.
There are two types of ransomware in circulation:
Encrypting ransomware, which incorporates advanced encryption algorithms. It's designed to block System files and demand payment to provide the victim with the key that can decrypt the blocked content.
Ex:
- Cryptolocker
- Locky
- Cryptowall
Locker ransomware, which locks the victim out of the operating system, making it impossible to access the desktop and any apps or files. The files are not encrypted in this case, but the attackers still ask for a ransom to unlock the infected computer.
- Police-themed ransomware
- Winlocker
Some locker versions can even infect the Master Boot Record (MBR). The MBR is the section of a PC’s hard drive which enables the operating system to boot up. When MBR ransomware strikes, the boot process can’t complete as usual and prompts a ransom note to be displayed on the screen.
Crypto-ransomware, as encryptors are usually known, is the most widespread ones, and also the subject of this article. The cyber security community agrees that this is the most prominent and worrisome cyber threat of the moment (and it’s been so for the past few years).
No comments:
Post a Comment