Getting Know About Ransomware
Ransomware is a type of malware that infects computers and prevents users from accessing their files or systems unless a ransom is paid to the attackers.
Here's a video courtesy of the Australian Cyber Security Centre explaining What is Ransomware.
One of the most common ways that ransomware is spread is through phishing emails, which often contain malicious attachments or links. It is important to be cautious when opening emails from unknown senders or clicking on links, and to never download attachments unless you are sure they are safe.
There are six stages of how Ransomware works to disrupt the system on the device. Here's the explanation:
- Infection: Ransomware starts to install anonymously on each device
- Execution: Some Ransomware can delete or encrypt backup files or folders.
- Encryption: This type of malware also locks access to data on the device.
- Notification: Will pop up a user notification containing the information about the ransom that must be paid to get the decryption code.
- Payment: Hackers usually use hidden TOR services to communicate in order to avoid detection by monitoring network traffic.
- Decryption: The victim will receive a decryption code to restore access to his device after making a payment. Even so, paying the ransom is highly not recommended because there is no guarantee that the files/folders you owned will return normal.
It is essential to keep your computer and software up to date with the latest security patches, as these patches often contain fixes for known vulnerabilities that can be exploited by attackers.
If you are unfortunate enough to fall victim to a ransomware attack, it is essential not to pay the ransom. Paying the ransom not only supports criminal activity but there is also no guarantee that the attackers will actually release your files or systems even after you have paid. Instead, seek the assistance of a reputable security expert or company to help you recover your files and remove the ransomware from your system.
In addition to taking these precautions, it is also essential to regularly back up your files and systems to a secure location, such as an external hard drive or cloud storage service. This will allow you to restore your files and systems if you ever fall victim to a ransomware attack.
Let us both have our awareness about Security Awareness