Difference between revisions of "Ransomware"
(2 more examples, fixed autocorrected typo) |
(a blurb on variants) |
||
| Line 3: | Line 3: | ||
==Evolution== | ==Evolution== | ||
Before improving in 2013, ransomware started out an a method of attack against corporations.<ref>https://www.knowbe4.com/ransomware</ref> The ransom would be very high, since the company targeted would have significant assets. To resume necessary business processes, the corporation may be willing to pay the exorbitant fee.<ref>http://www.darkreading.com/endpoint/a-brief-history-of-ransomware/d/d-id/1325212</ref><ref>http://www.latimes.com/business/hiltzik/la-fi-mh-2016-is-the-year-of-ransomware-20160308-column.html</ref> However, modern ransomware now usually charges much less, but is carried by a worm, virus, or trojan so that it can infect many computers worldwide.<ref>https://www.trendmicro.com/vinfo/us/security/definition/ransomware</ref> Although most individual users have no way of paying $100,000, they may be willing to pay $500 to recover their photographs, documents, or other files which are locked on their computer.<ref>https://us.norton.com/yoursecurityresource/detail.jsp?aid=rise_in_ransomware</ref> | Before improving in 2013, ransomware started out an a method of attack against corporations.<ref>https://www.knowbe4.com/ransomware</ref> The ransom would be very high, since the company targeted would have significant assets. To resume necessary business processes, the corporation may be willing to pay the exorbitant fee.<ref>http://www.darkreading.com/endpoint/a-brief-history-of-ransomware/d/d-id/1325212</ref><ref>http://www.latimes.com/business/hiltzik/la-fi-mh-2016-is-the-year-of-ransomware-20160308-column.html</ref> However, modern ransomware now usually charges much less, but is carried by a worm, virus, or trojan so that it can infect many computers worldwide.<ref>https://www.trendmicro.com/vinfo/us/security/definition/ransomware</ref> Although most individual users have no way of paying $100,000, they may be willing to pay $500 to recover their photographs, documents, or other files which are locked on their computer.<ref>https://us.norton.com/yoursecurityresource/detail.jsp?aid=rise_in_ransomware</ref> | ||
| + | |||
| + | ==Variants== | ||
| + | There are several types of ransomeware. Some lock the device, but do not actually encrypt the data, while others (called Leakware) will not deny access at all. Rather, leakware threatens to publish information from the victim's computer if they do not pay. This is nothing more than a form of blackmail. | ||
==Examples== | ==Examples== | ||
Revision as of 21:14, May 19, 2017
Ransomware is a type of malicious software (malware) used for cybercrime which attempts to prevent user access to something they value, usually digital information on their computer. It will then demand that a ransom be paid so that the user can regain access.[1] In most cases, ransomware will encrypt all of the information on a computer's writable drives, and change the bootloader so that when the computer is started, the malware is launched. It will state the demands, and explain how the ransom can be paid.[2] Once paid, the ransomware publisher will hopefully will hopefully send the user a decryption key, which can be entered to decrypt the drive(s).[3]
Evolution
Before improving in 2013, ransomware started out an a method of attack against corporations.[4] The ransom would be very high, since the company targeted would have significant assets. To resume necessary business processes, the corporation may be willing to pay the exorbitant fee.[5][6] However, modern ransomware now usually charges much less, but is carried by a worm, virus, or trojan so that it can infect many computers worldwide.[7] Although most individual users have no way of paying $100,000, they may be willing to pay $500 to recover their photographs, documents, or other files which are locked on their computer.[8]
Variants
There are several types of ransomeware. Some lock the device, but do not actually encrypt the data, while others (called Leakware) will not deny access at all. Rather, leakware threatens to publish information from the victim's computer if they do not pay. This is nothing more than a form of blackmail.
Examples
Theses are some of the better known examples of ransomware.
- AIDS Trojan (first known, and was flawed)
- TeslaCrypt (attacked video games)[9]
- WannaCry (attacked entire Windows systems)[10]
- Dharma (delivered using unsolicited emails)[11]
References
- ↑ https://www.microsoft.com/en-us/security/portal/mmpc/shared/ransomware.aspx
- ↑ http://whatis.techtarget.com/definition/ransomware-cryptovirus-cryptotrojan-or-cryptoworm
- ↑ https://heimdalsecurity.com/blog/what-is-ransomware-protection
- ↑ https://www.knowbe4.com/ransomware
- ↑ http://www.darkreading.com/endpoint/a-brief-history-of-ransomware/d/d-id/1325212
- ↑ http://www.latimes.com/business/hiltzik/la-fi-mh-2016-is-the-year-of-ransomware-20160308-column.html
- ↑ https://www.trendmicro.com/vinfo/us/security/definition/ransomware
- ↑ https://us.norton.com/yoursecurityresource/detail.jsp?aid=rise_in_ransomware
- ↑ https://www.hackread.com/famous-games-hijacked-for-ransom-through-teslacrypt-ransomware
- ↑ http://bgr.com/2017/05/15/wanna-cry-ransomware-virus-windows-wannacry-explainer
- ↑ https://www.hackread.com/india-horse-racing-site-hacked-with-dharma-ransomware