Friday, February 28, 2020

what is ransomware?

Comeback for all kinds of viruses

It is a type of malware (or pirated software) that prevents the ransomware victim from accessing his computer and requests ransom in return. The amount of ransom and the reason for paying it depends on the type of virus.

Some variants of ransomware indicate that payment must be paid to avoid the penalty of government authority (usually the FBI or local security), while others require ransom as the only way to encrypt encrypted files.

Additional behaviors of ransomware viruses include stealing user's important information, terminating some useful programs (anti-virus, anti-spyware, etc.), showing survey alerts, and other undesirable functions. The first types of such ransomware are of Russian origin. It has since been seen in almost every country in the world.

Types of ransomware viruses

There are many different types of ransomware that use different methods that enable computer users to pay the ransom. There are three versions of this article at the time of writing:

File Encryption Ransomware.  This ransomware version is mostly spread by trojans. Once in the computer, it finds and encrypts the most used files. Mostly encrypted files contain photos, music files, videos, art, business and other information that the victim may care about. In addition, such ransomware displays a huge warning message saying that the only way to encrypt encrypted files is to pay a ransom. In fact, this is true because such ransomware deletes the shadow copy and prevents it from being repaired.

Unencrypted Ransomware. This type of ransomware attack the entire computer system and threatens to pay a determined ransom from its user. For this, it issues a warning message that reveals itself related to the government. Typically hackers use the FBI, police, and so on. After entering the computer, they start looking for illegal items such as porographic products or broken versions of programs. Once detected, the virus shuts down the computer and a huge warning message appears on the computer screen, which appears to come from the state. In these conditions, it informs the victim by showing that there are some illegal files as a result of the search. In addition, the user is asked to pay a ransom if he does not want to go to jail.

Browser-Locking Ransomware.  This ransomware version does not infect the computer system. It causes a JavaScript file to lock the browser and display a huge warning message. This fake warning message is very similar to that of ransomware, which does not encrypt. It mostly indicates that illegal user activities entered on the Internet indicate that ransom must be paid in order not to go to jail. Of course, such ransomware developers have nothing to do with the FBI, Europol and other government agencies. 

Thursday, February 27, 2020

Ransomware Attacks - Are Global Market Players Still Unarmed?

Ransomware Attacks - Are Global Market Players Still Unarmed?


More than 600 participants from 180 financial institutions and government organizations from Australia, Canada, Europe, Hong Kong, India, Malaysia, Japan, Singapore and the USA participated in cybersecurity exercises to test the effectiveness of their response to ransomware viruses.
Among them are companies specializing in securities transactions, banks, asset management companies, the Financial Services Information Exchange and Analysis Center (FS-ISAC), as well as financial market service providers.

Sifma President and CEO Kenneth Bentsen notes: “The Quantum Dawn V program has enabled key public and private organizations in the world to verify in practice the coordination and application of incident response protocols, both inside and outside their countries, to ensure smooth operation financial markets in a series of industry-wide global cyberattacks. ”

Test participants tried to repel a conditional ransomware virus attack on one of the backbone banks of the United States, and then neutralize attempts to destroy similar financial institutions in Asia and the UK.

Organizations participating in the program did not leave real places of their physical location, which made the exercises even more realistic and allowed the use of real communication systems, such as e-mail and telephone.

The results of the exercises showed that none of the structures that participated in the program had the necessary resources to protect markets from cyber threats.

“These exercises focused on the fact that the frequency and sophistication of cyberattacks has increased, as well as the urgent need for the efficient allocation of resources to ensure security in financial institutions,” said Kenneth Bentsen. - The financial services industry is the main target that tens of thousands of cyber attacks target daily. Harmonizing regulation and supervision to reduce duplicate or redundant rules would allow firms to devote more resources to security and better protect investors. ”