Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I'm reading a Microsoft report examining the most prevalent ransomware families as of recent.
On the news, I've heard of CryptoLocker, CryptoWall and TeslaCrypt, but I don't see any of them mentioned by name. Only the "family" is marked there.
What is the family > brand correspondence here?
BTW, here's an McAfee article on TeslaCrypt, stating that it looks like CryptoLocker, without actually being the same thing.
CryptoLocker was taken down in 2014. Some copycat ransomware developers have chosen to imitate it, but the original CryptoLocker is gone. TeslaCrypt, CryptoWall etc. are all different strains of ransomware.
However, because of the aforementioned copying of CryptoLocker's name and because it was the first ransomware to be widely succesfull, some media continue to refer to all ransomware as "CryptoLocker" even though the different ransomware strains aren't based off its code.
Edit: after comparing the description of TesCrypt given by Microsoft to the Bleeping Computer TeslaCrypt ransomware FAQ & removal guide I can confirm that TesCrypt = TeslaCrypt. The same goes for Crowti; Microsoft lists Cryptowall as an alternate name. (I hate it that many AV vendors come up with different names for the same malware, it makes life more difficult for no good reason.)
