Ransomware, which encrypts data so cybercriminals can extract a payment for its safe return, has become increasingly common—and costly. The origins of modern ransomware can be traced to September 2013. Then, a fairly rudimentary form of malware, CryptoLocker, introduced a new and disturbing threat: when a person clicked a malicious email link or opened an infected file, a Trojan Horse began encrypting all the files on a computer. Once the process was complete, crooks demanded a cryptocurrency payment, usually a few hundred dollars, to unlock the data. If the person didn’t pay in cybercurrency, the perpetrator deleted the private key needed to decrypt the data and it was lost permanently.
—CACM, “The Worsening State of Ransomware”
Ransomware is a type of malware threat actors use to infect computers and encrypt computer files until a ransom is paid. After the initial infection, ransomware will attempt to spread to connected systems, including shared storage drives and other accessible computers.
If the threat actor’s ransom demands are not met (i.e., if the victim does not pay the ransom), the files or encrypted data will usually remain encrypted and unavailable to the victim. Even after a ransom has been paid to unlock encrypted files, threat actors will sometimes demand additional payments, delete a victim’s data, refuse to decrypt the data, or decline to provide a working decryption key to restore the victim’s access.
—CISA, “Security Tip (ST19-001) Protecting Against Ransomware“
Suddenly, you have people with limited ability using powerful software to discover, exfiltrate, and encrypt files. They wind up with many of the same capabilities that sophisticated cybercriminals have.
The Worsening State of Ransomware Read More
So, what can government and business leaders do to combat these attacks? And who’s responsible for improving our cybersecurity?
How America Can Reliably Resist Ransomware Read More
This website is the U.S. Government’s official one-stop location for resources to tackle ransomware more effectively.
StopRansomware.gov website – The U.S. Government’s One-Stop Location to Stop Ransomware Read More
Hackers laid the groundwork months ago for attacks. Now they’re flipping the switch.
The Covid-19 Pandemic Reveals Ransomware’s Long Game Read More
As more people work from home and anxiety mounts, expect cyberattacks of all sorts to take advantage.
Coronavirus Sets the Stage for Hacking Mayhem Read More
The “No More Ransom” website is an initiative by the National High Tech Crime Unit of the Netherlands’ police, Europol’s European Cybercrime Centre and McAfee with the goal to help victims of ransomware retrieve their encrypted data without having to pay the criminals.
No More Ransom Project Read More
Ransomware is a type of malware threat actors use to infect computers and encrypt computer files until a ransom is paid. If the threat actor’s ransom demands are not met, the files or encrypted data will usually remain encrypted and unavailable to the victim.
Protecting Against Ransomware Read More