BotNet News

Ransomware encrypts data, leaving it unusable unless the victim pays a fee. The attack is most common when a device or file is downloaded via a malicious link, attachment, compromised webpage or fake pop-up advertisement. The attacker then extorts a sum of money, usually in Bitcoin, from victims to unlock the encrypted data. If the payment is not received in time, the data will be irrevocably destroyed.

The most attractive targets for attackers include large organizations with valuable data and poor cybersecurity practices, hospitals with patients’ medical records and local governments that are often rely on outdated technology. In 2019 alone, ransomware attacks against the City of Atlanta, Colorado Department of Transportation and the Colonial Pipeline caused massive disruptions and cost millions to remediate.

Many attackers exploit known vulnerabilities to gain access to a network, including phishing emails with dangerous links or attachments, and by brute-forcing Remote Desktop Protocol (RDP) credentials. Once inside a network, they can move laterally to elevate privileges and deploy ransomware to encrypt files and systems.

Preventing ransomware requires a combination of vigilance and robust cybersecurity solutions. The best way to minimize the impact of ransomware is to back up important files regularly. Be on the lookout for suspicious files that have unusual file extensions, and avoid pirated software that may contain malware or not receive security updates. Users should also run their workstations on standard accounts, and restrict admin rights to those who need it for system-level tasks.