{"id":55890,"date":"2017-01-03T22:08:44","date_gmt":"2017-01-03T22:08:44","guid":{"rendered":"https:\/\/www.pcmatic.com\/blog\/?p=55890"},"modified":"2017-01-03T22:08:44","modified_gmt":"2017-01-03T22:08:44","slug":"ransomware-what-is-it","status":"publish","type":"post","link":"https:\/\/www.pcmatic.com\/blog\/ransomware-what-is-it\/","title":{"rendered":"Ransomware – What is it?"},"content":{"rendered":"

Ransomware, or malicious software that encrypts your files, holding them hostage until you pay the ransom demand, took the IT world by storm in 2016.\u00a0 On many different platforms, I have read about PC users falling victim to ransomware.\u00a0 Many of these cases are certainly true; however some I have found are actually support scams, or other viruses that have overrun PCs.\u00a0 Ransomware, due to its highly publicized nature has become the name of all malware.\u00a0 When it is simply one type, which is being incorrectly categorized at times.<\/p>\n

Ransomware – What is it?<\/h4>\n

The intent of this post is to help users understand what exactly ransomware is.\u00a0 If you have found yourself a victim of ransomware you will have noticed the following:<\/p>\n

    \n
  1. First your files are encrypted.\u00a0 This means they are completely inaccessible to you.\u00a0 Perhaps not all of your files were encrypted, but what the hacker deems as “most important” will be on the top of their encryption list.<\/li>\n
  2. Second, you will receive a message from the hacker stating you must pay\u00a0a certain amount of money,\u00a0in order to get your files back.\u00a0 The amount varies upon the ransomware variant (the\u00a0type of ransomware), as well as the victim.\u00a0 For instance a home user will not be demanded to pay as much as say, a medical facility.\u00a0 The demand may look something like these two images.\u00a0\u00a0 Now you will notice these examples look nothing alike.\u00a0 That is because, each ransomware variant has their own ransom page that comes up after you’ve been infected.\u00a0 However a trend found in each is the words “Your files are encrypted”.\u00a0 If you receive any kind of message stating your files have been encrypted, with a payment demand, you have been hit with ransomware.<\/li>\n<\/ol>\n

    As we know, ransomware has gained in popularity in the last year.\u00a0 Thousands, if not millions, of computers have been infected with legitimate ransomware attacks, and the victims have paid millions upon millions of dollars to these cyber criminals.\u00a0 By continuing to pay the hackers, the ransomware epidemic will continue.<\/p>\n

    Ransomware – The Aftermath<\/h4>\n

    Some may ask, why victims pay the ransom when we know it just reinforces the hackers to continue with these attacks.\u00a0 First, retrieving the files from a ransomware attack is incredibly difficult.\u00a0 For a home user, depending on the files, they could possibly wait to see if a decryption tool, a tool to unlock the files, becomes available in the near future.\u00a0 This could take weeks, months or even years.\u00a0 Most people don’t have that kind of time.<\/p>\n

    Many victims find they are able to restore their computers by either accessing a system restore point, or using backup files to restore their locked data.\u00a0 Unfortunately, this again takes time, which some people don’t have.\u00a0 Thinking of this from a business perspective, the hours it may take to not only retrieve the backup files, but then upload them could be daunting.\u00a0 Also, from a business perspective, they may have to hire a firm to assess the damage, determine the files that were accessed, etc.\u00a0 Again, time and money.\u00a0 So when you look at all of the contributing factors — is it worth just paying the demand and moving on?<\/p>\n

    No.\u00a0 Not even a little bit.\u00a0 For a few very clear reasons.<\/p>\n

      \n
    1. You paid them.\u00a0 Now what is to say they actually send you the tool to unlock your files?<\/li>\n
    2. They sent you the tool to decrypt your files–great!\u00a0 Now you’re a sitting duck.\u00a0 You paid once, and they will\u00a0assume you will\u00a0pay again.\u00a0 Wait for the next attack patiently…<\/li>\n
    3. You’ve set a standard.\u00a0 Because you paid the ransom, the cyber criminals are making more money.\u00a0 They now know the more people they infect, the more people that will pay.\u00a0 Example: Company X paid.\u00a0 Home user X paid.\u00a0 Company Y and Z will certainly pay too, so they’ll get infected.\u00a0 Home user Y and Z will also surely pay, so they’ll too get infected.\u00a0 See the trend?<\/li>\n<\/ol>\n

      Conclusion<\/h4>\n

      To avoid becoming the next victim to ransomware, there are a few steps PC users must take.\u00a0 First, you need to use a security solution that take a preventative approach.\u00a0 As mentioned earlier, getting your files back after ransomware strikes is incredibly difficult.\u00a0 Therefore, you must be proactive and use an antivirus solution that believes in prevention instead of reaction.\u00a0 You can read the latest Virus Bulletin Reactive and Proactive (RAP)\u00a0Test results here.<\/a>\u00a0 The RAP scores are based on how\u00a0several different antivirus solutions detected various malicious files in both a reactive and proactive fashion.\u00a0 Spoiler alert: PC Matic<\/a> was the leader in proactive detection with a 99.9% detection rating.<\/p>\n

      Also, in addition to a proactive security solution, be fully aware of what you are clicking on.\u00a0 Several times ransomware campaigns are sent through email.\u00a0 Before you open an email or attachment, think about what you are doing.\u00a0 These hackers aren’t making millions because they’re bad at what they do.\u00a0 The malicious emails and attachments will look legitimate, which is why you need to think about the following:<\/p>\n