Questions tagged [ransomware]

Ransomware is a lethal kind of Malware that Encrypts your harddrive(s) and holds them hostage, providing the decryption key if you pay the hostage-taker(s) money (well-known variants are the FBI Virus and the Police Virus).

Filter by
Sorted by
Tagged with
39
votes
2answers
9k views

How can ransomware be so prevalent when there is such a clear money trail to the attackers?

If there's one thing the Internet is good at, it's keeping track money and knowing where it has moved. Ransomware attacks typically request payment for a decryption key. How is it with such an easily ...
20
votes
5answers
5k views

Is there any open source ransomware? [closed]

I'm working on malware analysis at my university and I'm trying to develop ransomware. I'm planning to publish the source code after it's finished. Is there any open source ransomware sample so I can ...
6
votes
2answers
3k views

How does the attacker to ransomware get the password?

I have been thinking about ransomware and as I see it the password seems like it should be a problem for the attacker. I can see it going down one of two ways. Either the password is included in the ...
18
votes
3answers
20k views

Are there ransomware infections of Ubuntu Linux in the wild?

Due to the recent media coverage of ransomware attacks several people for whom I've provided personal computer support in the past have expressed concerned. The majority of these people are running ...
11
votes
3answers
2k views

How does genuine ransomware exist?

Typically, ransomware will encrypt the victim's files and ask for money in exchange for the decryption key. If you do pay the ransom, does it actually deliver on this promise? It seems to me that ...
4
votes
2answers
1k views

Is there any known encrypting ransomware that attacks Macs?

Just about every article I read about Cryptowall, Cryptolocker, and its ilk seems to assume that the reader is running some flavor of Windows. When I Google "ransomware OSX", I get a long list of ...
5
votes
2answers
532 views

What's the attitude of anti-virus vendors toward ransomware?

I was recently asked to look at a Windows computer behaving strangely, and I found a "Your files have been encrypted" ransom note that had been left in several directories. I wasn't able to identify ...
48
votes
11answers
8k views

Why are ransom attacks successful?

I just read that "ransom" attacks are on the rise - where the attacker uses a vulnerability to enable them to encrypt files and demand money for the key. Why is this any different to a disk failure, ...
1
vote
1answer
807 views

Decrypt a file by knowing the original content [duplicate]

We had some ransomware get into our system a couple of weeks ago, and it has encrypted a large amount of our files. I am wondering, is it possible to figure out an encryption key if I know the ...
3
votes
4answers
2k views

Is it possible to crack ransomware encryption if I have the original file?

Is it possible to crack ransomware encryption if I have 2 versions of a file: before and after the encryption? Are there any tools for such a thing?
48
votes
8answers
9k views

How does malicious software encrypt victims' files so quickly?

Encrypting a file to me is akin to dealing with a very long string, feeding it into the hashing or encryption function to get another long encrypted string (or a hash in the case of hashing). This ...
8
votes
2answers
1k views

How to avoid ransomware

Malware files execute themselves after downloading them. Let's look at it from the point of view of a piece of ransomware like CryptoLocker, from Wikipedia: Crypyowall 3.0, uses a payload ...
-2
votes
2answers
372 views

Cryptowall encryption files

This is a question concerning the way the Cryptowall ransomware encrypts files on the victim's computer. Someone knows if it is possible to recover the encryption key comparing the encrypted file and ...
4
votes
3answers
2k views

Does Ransomware on one computer put entire network at risk?

I was visiting an office recently where one computer had become infected with a ransomware variant and turned off until the 'network guy' could come take a look (I don't know which one as no one took ...
1
vote
1answer
556 views

Crypto Ransomware - How decryption is done when user accept to cooperate?

When you have been "hacked" and you accept to pay for decrypting your encrypted files, how the attacker do the job ? I understood that a symmetric key is used, itself encrypted by the attacker public ...
-5
votes
1answer
341 views

RC4 and Crypto Ransomware [closed]

If we allow no RC4 support on any devices, will Crypto Ransomware be slowed down or eliminated? Is this a patching and not a malware problem? Can we block this threat at the packet level?
1
vote
2answers
229 views

Limitations of botnets [closed]

My question is very closely related to this question but I didn't find my answer there. Specifically, I'm interested in whether the C2 server can modify aspects/properties of the malware and, if so, ...
0
votes
2answers
448 views

Will Ad Block Plus block the ads that give someone Cryptowall 2.0?

Now I already know that making sure your browser plugins are either non-existent or up-to-date is one way of being on the safe side against ransomeware like Cryptowall 2.0; but since clicking ads are ...
3
votes
2answers
1k views

What agency digitally signed Cryptowall 2.0 so that it can run without being detected?

What agency issued a digital signature for the Cryptowall 2.0 ransomware virus? Is it too early to tell? As far as I know this is how Microsoft planned to prevent malware, by adding a digital ...
4
votes
2answers
2k views

How can I recover files encrypted by Android ransomware?

My Samsung Galaxy Note II was infected by a virus called the "FBI virus." Fortunately, I've managed to remove the malware but my problem now is that all my files have been encrypted. How can I ...