Ransomware is malicious software that threatens the victim with publishing their data or perpetually block access, usually by using encryption, until a ransom is paid.
Some high profile attacks in recent years included WannaCry, NotPetya, Locky and Bad Rabbit. These attacks targeted organizations across the globe. Other, less high profile, attacks have occurred on a regular basis. These attacks cause disruption of services and loss of data. Ransomware has even evolved “as a service” (RaaS) to anyone who wanted to make money this way.
The latest report published by Kaspersky Security Network claims that ransomware is rapidly vanishing with a 30 percent decline in attacks between April 2017 and March 2018.
Cryptomining malware appears to be taking its turn as a leader in illicit money making schemes. By secretly harvesting the processing power of the infected PC a cryptomining crook can quietly reap a steady stream of income.
Ransomware still remains an active threat. Short term damage may include recovering from the attack and long term impact could include permanent data loss.
Take the appropriate steps to help protect yourself:
- Establish a backup plan. Back up your data on a regular basis and test the validity of the backups
- Keep all hardware patched and up to date
- Install anti-virus software
- Don’t open unsolicited email attachments or click on links
It is not recommended that you pay the ransom to the crooks as this perpetuates the practice of the activity. If you do fall victim to ransomware you may have a chance of decrypting your files. No More Ransom! posts the latest decryptors for a variety of malware infections.