What is ransomware and how to defend yourself

Ransomware, also known as blackmail viruses, are malware that block access to computer files and ask for money to “free” your PC

Lately, this word resonates often: ransomware. It is a form of malware, i.e. a malicious program, that infects and renders victims’ computers useless. Also known as the blackmail virus, ransomware encrypts data and demands a ransom payment.

The virus has made headlines because of attacks that have crashed the computers of thousands of companies, including multinationals that have been forced to take action wasting time and spending thousands of euros. The first one was the ransomware WannaCry, able to spread in a few days like wildfire. Then it was the turn of Petya, an even more dangerous variant that left no chance to the data contained in the affected machines.

The effects of ransomware

The modus operandi of this malware is really wicked: it sneaks into the computer – with a series of even trivial techniques – and makes it inaccessible. Most of them – and the most fearsome ones – use advanced encryption systems, so much so that one of the most used synonyms to identify this threat is cryptolocker. In these cases, the ransomware first encrypts all the files contained in the device and then informs the victims that the only way to get the data back is to pay. Hackers, in fact, promise to send decryption keys to unlock computers once they receive the money.

Many experts strongly advise against paying because you would be feeding a criminal activity and, then, you are not sure that cyber criminals keep their pacts.

How is it spread

How does ransomware strike?  There are several techniques: a malicious email attachment or a link opened superficially can open the “doors” to this type of malware. Or, as in the case of WannaCry and Petya, ransomware penetrates devices by exploiting vulnerabilities in the operating system. Often, however, the virus is hidden inside banner ads, especially on adult sites.

Famous victims

Over the years, ransomware has become increasingly difficult to detect and block, becoming a bogeyman especially for companies and institutions. The stakes here are really high: hackers, in fact, count on the fact that many companies, in order to get their data back, would be willing to submit to this form of computer extortion (a South Korean company even paid a million dollars). In addition, they have also landed on mobile devices.

How to defend yourself

The advice described here applies to any type of malware, not just ransomware. The blackmail virus, as anticipated, needs some “external” help to strike. To defend yourself, just keep your guard up and avoid opening suspicious links and attachments. Do not download programs, even if they are free, from unofficial platforms. And above all, remember to update your antivirus and your operating system.