‘In the first half of 2020, the total number of global ransomware reports increased by 715% year-over-year.’ (Threat Landscape Report 2020 by Bitdefender)

With this statistic it is worth exploring and understanding the What is factor, and the how to protect yourself from becoming a victim of this type of infection.

A computer virus is malware attached to another program (such as a document), which can replicate and spread after an initial execution on a target system where human interaction is required.

Specifically Ransomware is a type of malware from cryptovirology that threatens to publish the victim’s data or perpetually block access to it unless a ransom is paid. Ransomware is a form of malware that encrypts a victim’s files. The attacker then demands a ransom from the victim to restore access to the data upon payment. 

Users are shown instructions for how to pay a fee to get the decryption key. The costs can range from a few hundred dollars to thousands, payable to cybercriminals in Bitcoin.

Cryptography + Malware = Ransomware How it Works: When you combine cryptography with malware, you get a very dangerous mix of problems. This is a type of computer virus that goes by another name, “ransomware”. This type of virus is part of a field of study called “cryptovirology”. Through the use of techniques called phishing, a threat actor sends the ransomware file to an unknowing victim. If the file is opened it will execute the virus payload, which is malicious code. The ransomware runs the code that encrypts user data on the infected computer or host. The data are user files like documents, spreadsheets, photos, multimedia files and even confidential records. The ransomware targets your personal computer files and applies an encryption algorithm like RSA which makes the file inaccessible. The only way to access them is if the user pays a ransom to the threat actor by following instructions which appear encoded into the encrypted files. Thus it is called ransomware, because a form of payment is demanded in order to fix the problem.

Inaccessible is not always true there are ways to get access to your encrypted files however it is not normally an easy task for the everyday common computer user. First and foremast take steps through education in how to stay safe from Ransomware Attacks and infections.

Here is a link of a well explained and defined explanation of What and How Ransomware works in detail. Simulated Ransomware Attack

Combat Ransomware Of Any Kind

Always have an antivirus or security software installed. It is also best practice to keep the operating system (Windows, Linux, macOS, etc.) updated with the latest software patches and updates from vendors. Microsoft allows users to run automatic updates on their systems the best method is prevention.

For those who need more information there is good information available from the No More Ransom Project.

Ransomware is malware that locks your computer and mobile devices or encrypts your electronic files. When this happens, you can’t get to the data unless you pay a ransom. However this is not guaranteed and you should never pay!

Ransomware Q &A

If you have fallen victim to ransomware Report it here:

• In The United States

   

Several Programs Recommended to detect, Remove and Prevent Infections in real time are listed below.

Note: Reality is Ransomware depending on the severity of the infection may not always be able to be removed due in part the path and design stratagem may have infected the core Windows Operating Files with that said first and foremost ensure you have a well prepared Backup-Scheme in place of course one that is not infected as restoration is futile if you have backed up the system with the original infection in place.

Know How to Implement Booting into Safe Mode with in your Windows Operating System as being in Safe Mode is the only real true way to remove and sometimes detect these unwanted programs.

Her is an excellent article pretty much everything you need to know from LogicallySecure.com

A guide to Ransomware – what it is, how it works, and how to defend against it

The List of Recommended Programs to have in your arsenal.

Note: All these programs listed I offer to you as a download I claim no ownership though do endorse them for usage.

Comodo Internet Security First line of defense stops before it even infects your system. Even the ones that are not in the Database of detection and removal.

SpyBot SD “Search & Destroy” By “Safer Networking” Stand Alone Ver. No Installation required. Download SpyBot S&D

MalwareBytes Excellent and highly effective detection and Removal Utility.

SUPERAntiSpyware Free Edition: Another excellent Tool to have available.