What is a ransomware attack?
It is an attack by a hacker or a group of hackers who remotely locks the target computers and demands money in order to restore the data and access.
How does it work?
When a computer is infected, the ransomware program(malware) encrypts important documents and files and then demands a ransom, typically in Bitcoin, for some kind of Digital Key in order to unlock the files. Though there is not surety of computer being unlocked so just in case the user didn't have any recent backup of his data he/she might face a huge data loss.
Recent Ransomware Attacks:-
1. WannaCry Ransomware:-
This attack began on 12 may 2017 which targeted computers running Microsoft Windows Operating Systems by encrypting their data and demanding some ransom in Bitcoin so as to unlock the computer.
Within a day this attack was reported to have infected more than 230,000 computers in over 150 countries. Parts of the United Kingdom's National Health Service (NHS), FedEx and Deutsche Bahn were hit, along with many other countries and companies worldwide.
Some computer being infected by WannaCry
Some computer being infected by WannaCry
2. Petya Ransomware:-
Petya is a family of encrypting ransomware that was first discovered in 2016.
On 27 june 2017 this ransomware started infecting computers worldwide. The malware targets Microsoft Windows - based systems, infecting the Master Boot Record (MBR) to execute a payload that encrypts a hard drive's file system table and prevents Windows from booting. It subsequently demands that the user make a payment in Bitcoin in order to regain access to the system.
This attack came just a month after the WannaCry attack and according to various software companies like Kaspersky, this attack infected more computers than the previous attack.
Some computer infected by Petya Ransomware
Tips to follow to protect against Ransomware Attacks:-
1. Think before you click- If you receive an email that contains an attachment, think twice before clicking on it. If you were not expecting it or it looks suspicious, delete it, even if it appears to come from someone you know.
2. Back up your files- Always make sure your files are backed up. That way, if they become compromised in a ransomware attack, you can wipe your disk drive clean and restore your data from the backup. Remember, backups can also get infected, so you should disconnect your backup drives from your PC when possible to prevent this from happening.
3. Update your PC and devices- Ensure that your PC's operating system is up-to-date to latest Windows 10. Software updates and 'patches' contains security improvements that help to secure your PC and make it more difficult for ransomware and viruses to infect it.
4. Update your security software- New viruses and threats appear all the time, so it is important to keep your security software up-to-date.
5. Avoid using public internet connections and cracked softwares.
Read more about the topic at:-
Comments
Post a Comment