Trends
3 key steps of a ransomware attack
Cybercrime has been on the rise for years and shows no signs of slowing. While cyberattacks were once focused on large companies, now everyone—from small business owners to local government employees to individuals—has to be on the alert. One of the most common types of cyberattack is ransomware. Ra…
Headline
Cybercrime has been on the rise for years and shows no signs of slowing. While cyberattacks were once focused on large companies, now everyone—from small business owners to local government employees to individuals—has to be on the alert. One of the most common types of…
Context
Cybercrime has been on the rise for years and shows no signs of slowing. While cyberattacks were once focused on large companies, now everyone—from small business owners to local government employees to individuals—has to be on the alert. One of the most common types of cyberattack is ransomware. Ransomware can lock up your computer’s data and hold it hostage until you pay a ransom to the attacker. These attacks can be devastating if you’re not properly prepared.
Evidence
Pending intelligence enrichment.
Analysis
Ransomware is a type of malware that reversibly encrypts files on your computer. While many individuals and businesses routinely encrypt their files for security, ransomware is problematic because the attacker—not the owner of the computer—has the decryption key. This means users can’t access their files unless the hacker decrypts them. In a typical ransomware attack, the hacker will offer to decrypt your files for a price. This is the ransom in the attack, and it can range from hundreds of dollars for an individual to millions for a large corporation. Some ransomware will delete your files after a specific, predetermined amount of time passes, which puts pressure on victims to pay up quickly. In other ransomware attacks, the attacker will also steal copies of your data and threaten to release them if you refuse to pay. This type of ransomware attack can be particularly problematic for large companies and government agencies that store sensitive data. Also read: How many Regional Internet Registries (RIRs) are there?
Key Points
- Ransomware is a type of computer virus, also called malicious software or malware, that locks your computer and sends out an alert demanding payment for the return of your data.
- A ransomware attack can take the same core 3 stages, including infection and distribution vectors, data encryption, and ransom demand.
- However, different ransomware can include different implementations or additional steps.
Actions
Pending intelligence enrichment.
