MALWARE

 

Malware evolves constantly, and your security too

 

In this digital world we individuals face a lot of malicious online threats, which can harm our systems and could take on our personal data and pieces of information. One of the biggest examples of this malware is RANSOMWARE. In this blog, we are going to talk about Ransomware briefly. What, when, and how?

     

       Ransomware is a type of malicious software that is designed to block a user or an organization’s access to files on their computer until a sum of money is paid. Ransomware is usually aimed at individuals, but it’s a matter of time before they start aiming at bigger businesses as well, sometimes they also give deadlines to pay the money.

Ransomware can be caused by phishing emails (these are the fake emails that are sent to the target), lack of access management, and weak passwords. But as we know when there is a problem there is a solution as well. This means that we can prevent these attacks from happening: -

1.   Maintain backups

2.   Install anti-malware software

3.   Do not open suspicious mails

4.   Do not pay ransoms

5.   Have strong passwords and keep updating them from time to time.

6.   Limit user access privileges

7.   Run regular Security testing

8.   Security Awareness training

 

These are small steps for the prevention of ransomware or any type of malware attacks, and most importantly we also have to be aware of online attacks which are taking place frequently and we can also educate people regarding these online attacks.

 

Now let us see the types of Ransomware: -

1.   Locker Ransomware – This Ransomware blocks access to computer systems entirely. They use social engineering techniques to get into the system or damage it. A pop-up may appear on the target’s screen and say “your system was used to visit this illegal website, to unlock it you have to pay a $500 fine,”. This is not a widely commonly spread attack but this does take place and the attacker can ask for a heavy fine as well.

 

2.   Crypto-Ransomware – This is the most common and widespread than locker ransomware. This is spread from malicious emails, websites, or the downloads which we do on a daily basis. This Ransomware encrypts all the files from the system and demands the target for fine.

 

3.   Double extortion Ransomware – In this attack, the attackers threaten the target to publish his/her personal data or files. They encrypt the files and export them to the blackmailer and in exchange ask the target to pay a ransom amount. This means that the victim can restore the lost data but he/she still has to pay the amount to the attacker.

 

 

 

Let us take a sneak peek into the timeline of Ransomware

 

 

 

A ransomware attack can take place anywhere whether it be a big target like multi-billion companies or a small target where the attacker just blackmails the target and tries to take a small amount of ransom but when the bigger companies are targeted the ransom amount is also huge and the loss of the target is also very heavy.

Let us take a look at the real-life examples of such attacks and the heavy losses which they had to face due to this attack -

·      In Telangana malicious software attacked the power utility systems of Telangana and Andhra Pradesh, where all the servers went down, and the virus spread through the systems overnight causing a lot of problems for the states to recover through their files and data which were lost.

 

·      WannaCry Ransomware this was the worst hit ransomware in India, it affected at least more than 2 lakh computer systems all over India. It had gone to many places like Gujarat and Tamil Nadu, which then started to travel globally as well.

 

·      Petya, India comes under the top 10 countries to be hit by Petya Ransomware. This virus attacked at the terminals of the seaport, which caused a major lockdown or the shutdown of the entire computer system.

 

·      The BSNL attack, the state-owned telecom BSNL company was hit by a huge malware attack, which impacted at least 2000 broadband modems. The worst part is at least 60,000 computer systems were dysfunctional after the malware attack.

 

 

As we are evolving and advancing day by day, the risk of malware will also increase day by day.  Apart from developing and just growing, we should also learn how to be protected from these types of Malware.

 

First is employee awareness training, organization must educate their employees about the cyber threats and the malware. Which can help reduce the employee errors.

Always back up your data in external storage which should not be connected to your computer, as if there is a virus attack then all your personal data are safe.

These are a few tips on what is ransomware and how does it work.

Lets us all be aware of online threats and be educated and make this world a better place.