What is a Ransomware Attack?
A ransomware attack is a type of malware attack that encrypts a victim’s data and prevents access until a ransom payment is made. Ransomware attackers often use social engineering techniques, such as phishing, to gain access to a victim’s environment.
It’s also important to remember that you’re dealing with cybercriminals, they don’t always follow through with their end of the “deal.”
What Are the Different Types of Ransomware?
Ransomware variants takes many forms, below are some of the most common types:
Here are the most common types:
1. Crypto ransomware or encryptors are one of the most well-known and damaging variants. This type encrypts the files and data within a system, making the content inaccessible without a decryption key.
2. Lockers completely lock you out of your system, so your files and applications are inaccessible. A lock screen displays the ransom demand, possibly with a countdown clock to increase urgency and drive victims to act.
3. Scareware is fake software that claims to have detected a virus or other issue on your computer and directs you to pay to resolve the problem. Some types of scareware lock the computer, while others simply flood the screen with pop-up alerts without actually damaging files.
4. Doxware or leakware threatens to distribute sensitive personal or company information online, and many people panic and pay the ransom to prevent private data from falling into the wrong hands or entering the public domain. One variation is police-themed ransomware, which claims to be law enforcement and warns that illegal online activity has been detected, but jail time can be avoided by paying a fine.
5. RaaS (Ransomware as a Service) refers to malware hosted anonymously by a “professional” hacker that handles all aspects of the attack, from distributing ransomware to collecting payments and restoring access, in return for a cut of the loot.
Below are just a few examples of some infamous ransomware detected over the last few years:
Ransomware Protection Tips
The following tips are supported by what the CrowdStrike has found to successfully prevent and combat ransomware:
- Practice Good IT Hygiene
- Improve Resiliency of Internet Facing Applications
- Implement and Enhance Email Security
- Harden Endpoints
- Ransomware-Proof Data with Offline Backups
- Restrict Access to Virtualization Management Infrastructure
- Implement an Identity and Access Management (IAM) Program
- Develop and Pressure-Test an Incident Response Plan
- Know When to Ask for Help
SMB Ransomware Threats
Download this white paper to learn how SMBs can protect against ransomware, prepare for a potential incident, and find help if they’ve experienced a breachDownload Now