Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Is it a good solution that rename an important files to a new file type that only owner od the file know? like Data.Rar rename it to Data.BEATURAN, so it will become BEATURAN File and just rename extension back to it original known file .Rar when need it at a safe place?
Thanks in advance.
De facto, many ransomware variants target specific file types that promise to be valuable to the owner (text documents, images, etc.). This way the ransomware can operate more efficiently and doesn't risk the stability of the host system by accidentally encrypting system files. Hence, it's plausible that randomly renaming the extensions of important files could eventually leave them unencrypted in case of an attack.
But I'd advise against doing that because it's basically a security by obscurity pattern: You focus on an obscure hiding technique instead of preventing malware infections in the first place. Ransomware developers can take other approaches to determine the real file type (content sniffing) and not all ransomware encrypts solely based on extensions. Instead, your time is best spent at making sure your run a fully patched system and do regular backups.
You can find many ransomware threads with great advice on the site, e.g.:
Renaming individual files might protect against some types of ransomware but not others.
Some target files, and others target the entire hard drive, like happened in Saudi, where the boot sector and partition tables were wiped, making the drives appear to have been completely erased. This is especially effective on encrypted drives.
Whole drives can be made unavailable by encrypting the partition table, which is quick and effective. In that case, it doesn't care what files are on there.
Your best protection against ransomware is to keep good backups.
