RANSOMEWARE

Ransomeware is a type of attack in which the attacker locks and encrypt the victim data, important files and then demands a payment to unlock and decrypt the file..

---

The most famous ransomeware attack is wannacry which is done in 2017 , affected 150 countries and 20,000 computers and demanding 4$ bitcoin payment .

---

How this ransomeware affected our system??

When the user on their system click on a link, visits web pages or installs files or program that includes malicious code designed to covertly download and install the ransomeware .

Ransomeware attack process —

• PHISHING EMAILS
• SOCIAL MEDIA
• MALVERTISING
• POP-UP ON YOUR SCREEN
• EMAIL ATTACHMENT

Ransomeware process :

1. INFECTION
2. EXECUTION
3. ENCRYPTION
4. USER NOTIFICATION
5. CLEAN UP
6. PAYMENT
7. DECRYPTION

PROTECTION BY RANSOMEWARE:

• Antivirus
• Data backup (use 3-2-1)
• Email protector
• Ransomeware defense

How to remove an active ransomeware infection::-

Isolate:

Identify infected machine disconnected from networks and locks drives to prevent encryption.

Investigate:

Check what strain on ransomeware , you were hit on it ,and check there are any decryption available

• Hackers world
• Hackers world
• Hackers world