Ransomware shuts down your client.. What do you do?

1 Tuesday, May 2, 2023

Crypto Ransomware:a Real Problem with Real Solutions

Agenda

Ransomware’s evolution

Costs of ransomware attacks

How ransomware infects systems

Conclusion

Major threattrends

How to avoid being a crypto ransomware

victim

Major Threat Trends

Polymorphic Malware Is the Norm

Source: Webroot – 2016 Threat Brief, February 2016

97% of new malwareis unique to a specific endpoint,

rendering signature-basedsecurity obsolete

Malware and PUAs have become overwhelmingly

polymorphic

“Good” and “Bad” Websites

High Success Rates of Phishing Attacks

of internet users will fall for a zero-day phishing attack in a year

Mobile Apps Are Riskier than Ever

Increase indicates a shift to malicious and unwanted apps

2014 2015

Ransomware’s Evolution

What Is Crypto Ransomware?

Classification

Trojan horse

Ransomware/crypto virus

OS affected

Windows

First observed

September 2013

Drive types

Local, network, and removable

Drive types

Spam botnet lures victim

Phishing email with attachment

Attachment downloader gets Zeus

Zeus gets CryptoLocker/CryptoDefense

Evolution of Crypto Ransomware

Increasing adoptionof IP anonymizing services

Ransomware-as-a-service

Detection issues due to thread injection, process

hollowing, and new exploits

Expanding pastWindows to macOS

Now a commodityextortion service!

How Ransomware Infects Systems

Silent Deployment

Before After

Click here for full presentation

Ransomware shuts down your client.. What do you do?

Technology

Transcript of Ransomware shuts down your client.. What do you do?

RANSOMWARE - Europol€¦ · THE MALWARE THAT HOLDS YOUR DATA HOSTAGE FOR A PRICE RANSOMWARE PROTECT YOURSELF INFECTED? WHAT TO DO NEXT HOW DOES IT SPREAD? Ransomware prevents or

Webroot - Ransomware Threats

What to do after ransomware attack - Jefferson Bank · 2017-04-12 · what to do after ransomware attack In case you find that your computer has been locked by Ransomware, your Network

UNMASKING RANSOMWARE

Ransomware: What Is It and What Can You Do About It?€¦ · BY RANSOMWARE Protecting your company from the latest and most sophisticated Ransomware threats isn’t as simple as installing

LockBit Ransomware

Big Brother Groklaw shuts down

Business Guide to Ransomware - IT Best of Breed · 2017-05-15 · Business Guide to Ransomware Table of Contents: 1. Introduction to Ransomware 2. Ransomware as a Service 3. Dissection

CYBERSECURITY & DATA PRIVACY: RANSOMWARE Elser_Ransomware... · 2017-09-12 · How do I protect against ransomware attacks? Back up your most critical data assets and make sure the

Cyber Security White Paper for Customers · 3 Use a Trusted, Commercial Anti-Ransomware Product. Most commercial anti-virus products do not include specific protection against ransomware

Ransomware- success stories Triangle InfoSeCon · Ransomware Ransomware WannaCry,Petya,CryptoLocker,and TeslaCrypt are some of the more notable examples of such ransomware. In general,

Ransomware infographicITU - itu.int · ransomware detections were flagged as crypto-ransomware. a 27% increase since it was discovered. A ransomware variant seen in Russia that zipped

Ransomware Cyber Threat Acronis Infographicdownload.acronis.com/...Ransomware_Threat_Acronis... · RANSOMWARE THE NEW CYBER THREAT AND HOW TO STOP IT RANSOMWARE: hackers hold your

North Korea Shuts Down Universities Sends Students

Cybercrime Tactics & Techniques: Q2 2019 Ransomware ......Ransomware shifts to business targets » Consumer ransomware drops -12% YoY & -25% QoQ » Business focused ransomware increase

Ransomware: Wannacry

Ransomware - asecuritysite.com · Types •Locker Ransomware. Locks the computer. •Crypto Ransomware. Requires decryption key. •Master Boot Record Ransomware. Attack MBR so that

Ransomware Tips to Help Avoid Ransomware Attacks · 2019. 5. 8. · installed the ransomware. Tips to Help Avoid Ransomware Attacks 1. Don’t click. Visiting unsafe, suspicious or

Ransomware Eradication using Biomorphic Perimeterisation€¦ · recover from NotPetya. Types of Ransomware (Device Target) Ransomware Device Targets Device Targets are Different

RANSOMWARE PROTECTION€¦ · RANSOMWARE PROTECTION UIDE . ... Exploitation Exploit Mitigations Application Behavior Payload Execution ... PREVENTION AGAINST RANSOMWARE.