Introduction:
Ransomware is a type of malicious software (malware) designed to block access to a computer system or its data until a sum of money, or ransom, is paid. Here’s a more in-depth look at it:
Definition:
Ransomware is a form of malware that encrypts a victim's files. The attacker then demands a ransom from the victim to restore access to the data upon payment. Victims are shown instructions for how to pay a fee to get the decryption key.
How It Works:
Infection: Ransomware can infiltrate a system through phishing emails, malicious attachments, infected software apps, or compromised websites.
Encryption: Once the ransomware is executed, it starts encrypting files on the victim's computer or network.
Ransom Demand: After encryption, a ransom note is displayed, usually demanding payment in cryptocurrency like Bitcoin, providing instructions on how to make the payment.
Decryption: Ideally, once the ransom is paid, the attacker provides a decryption key to unlock the files. However, there’s no guarantee that they will.
Types of Ransomware:
- Crypto Ransomware: Encrypts valuable files on a computer so that the user cannot access them.
- Locker Ransomware: Locks the user out of their device completely.
- Scareware: Falsely claims to have found issues on the victim's computer and demands money to fix them.
- Doxware/Leakware: Threatens to publish the victim's personal data online unless a ransom is paid.
Prevention:
Regular Backups: Frequently backup your files to an external drive or cloud service.
Security Software: Use reputable antivirus and anti-malware programs.
Email Caution: Be wary of unsolicited emails and attachments.
Software Updates: Keep your operating system and software up to date to patch vulnerabilities.
Response:
If you fall victim to ransomware, it’s generally advised to:
- Not Pay the Ransom: Paying doesn’t guarantee you’ll get your data back and it encourages the attackers.
- Disconnect: Immediately isolate the infected computer to prevent the ransomware from spreading.
- Notify Authorities: Report the attack to law enforcement.
- Seek Professional Help: Contact cybersecurity professionals for assistance.
Summary:
Ransomware is a type of malicious software designed to block access to a computer system until a sum of money is paid. For instance, all of a sudden, your computer monitor greets you with a big red image, demanding that if you do not pay $250.00 to an unknown party in the next 48 hours, everything you know and love on your computer will be locked, encrypted or erased.
To help keep any virus at bay, please report anything unusual to Campus Support at (479) 968-0646 or [email protected]. For more information on this issue, visit: http://www.bleepingcomputer.com/news/security/latest-teslacrypt-ransomware-adds-the-ccc-extension-to-encrypted-files/