Sunday 28 May 2017

What is Ransomware?

Computers across the world were locked up and user’s files held for ransom when dozens of countries were hit in a cyberattack that targeted hospitals, companies and government agencies. Malware is a general term that refers to software that’s harmful to your computer. Ransomware is a type of malware that essentially takes over a computer and prevents users from accessing data on it until a ransom is paid.

How computer is infected - In most cases, the software infects computers through links or attachments in malicious messages known as phishing emails. The software usually is hidden within links or attachments in emails. Once the user clicks on the link or opens the document, their computer is infected and the software takes over. Ransomware, like the name suggests is when your files are held for ransom. It finds all your files and encrypts them and then leaves you a message. If you want to decrypt them, you have to pay.
How it works - The ransomware encrypts data on the computer using an encryption key that only the attacker knows. If the ransom isn’t paid, the data is often lost forever. When the ransomware takes over a computer, the attackers are pretty explicit in their demands. In most cases, they change the wallpaper of the computer and give specific instructions telling the user how to pay to recover their files. Most attackers demand between $300 and $500 to remove the malicious ransomware; the price can double if the amount isn’t paid within 24 hours. Law enforcement officials have discouraged people from paying these ransoms.

How to avoid it - Users should regularly back up their data and ensure that security updates are installed on your computer as soon as they are released Up-to-date backups make it possible to restore files without paying a ransom. Users should also look for malicious email messages that often masquerade as emails from companies or people you regularly interact with online. It’s important to avoid clicking on links or opening attachments in those messages, since they could unleash malware.

No comments: