{"id":44080,"date":"2022-07-06T16:25:49","date_gmt":"2022-07-06T13:25:49","guid":{"rendered":"http:\/\/datalabsua.com\/ua\/?p=44080"},"modified":"2024-05-23T12:09:15","modified_gmt":"2024-05-23T09:09:15","slug":"what-is-ransomware","status":"publish","type":"post","link":"https:\/\/datalabsua.com\/en\/what-is-ransomware\/","title":{"rendered":"What is Ransomware?"},"content":{"rendered":"

The number of ransomware attacks is constantly rising. According to the research, the number of such attacks in 2021 has doubled. Eastern European countries are the most targeted region for such attacks. Their share is 55% of the total number of malware infections.<\/p>\n

Ransomware<\/strong> is malware that encrypts victim\u2019s files, databases, and programs for purpose of ransom. After infection the victim receives a message about the possibility of data decrypting by paying a ransom. Usually, the ransom is paid in cryptocurrency. Ransomware can also use the \u00abtriple ransomware\u00bb technique, that helps them to create a \u00abdigital hostage\u00bb. That is, a cybercriminal receives victim\u2019s data copies before the encryption process, that they later threaten to make public if the victim refuses the ransom.<\/p>\n

Ransomware as a Service (RaaS)<\/strong> is a subscription-based model. This model allows affiliates to use ransomware tools to carry out an attack. From each successful attack and paid ransom, partners receive a percentage. RaaS (Ransomware-as-a-service) proved to be an effective way to increase profits, \u00a0helped transform digital ransomware into a successful and prosperous business.<\/p>\n

RaaS is built on the principle of SaaS (software as a service) that makes it even easier to carry out an attack. Like SaaS, RaaS does not require special skills and experience from users. Even inexperienced hackers can carry out sophisticated cyberattacks. RaaS software has a high probability of successful penetration and a low probability of detection. The low technical entry barrier and huge earning potential make RaaS solutions popular that increases the number of victims.<\/p>\n

RaaS solutions bring high dividends to partners. Users can register with a one-time payment, as well as with a monthly subscription. They are provided with documentation with step-by-step instructions for launching attacks. Some distributors provide a dashboard to track the status of each ransomware attack. Attracting partners takes place on the dark web.<\/p>\n

Most hacks happen through phishing attacks (a method of stealing confidential information). An email is sent to the victim that contains a link. By clicking on this link, the victim unknowingly activates a malware downloading. Email looks very convincing, so more often the victim is led to a provocation.<\/p>\n

Once downloaded, ransomware disables firewalls and antivirus programs, and may also initiate additional components downloading. Thus, the malware can spread freely and silently, and encrypt the victim’s files, making them inaccessible. With the end of the attack, the extortion begins. The victim receives a TXT file containing the ransom text in exchange for a decryption key. Cybercriminal can also threaten the victim to publish the data on the dark web if the payment is not made within the agreed timeframe.<\/p>\n

Since the darknet is a criminal network, any information leak can provide free access to confidential data and customer data. Such consequences force a victim to obey cybercriminal demands. Payments are made through the darknet using a special payment gateway.<\/p>\n

The best defense against ransomware attacks is a combination of staff training, security measures, and ongoing system monitoring for vulnerabilities.<\/p>\n

Recommendations<\/strong> to protect ransomware:<\/strong><\/p>\n