Ransomware – what is it?

What is Ransomware?

A type of malware, designed for extortion. When ransomware is activated it stops access to a device or the data on it until the victim pays a ransom. A common feature of ransomware is a countdown timer for a payment deadline, if payment is not made by the deadline the victim risks permanently losing access to data or the fee increases.

There are two main categories of ransomware: locker and crypto. Locker prevents the victim accessing the entire device, but does not encrypt the files. As locker ransomware does not encrypt it is typically easier to remove. Cypto ransomware does not lock the victim out from the device, but it does prevent access to files or data, by the use of encryption. This type of ransomware is effective on those who do not use offline or local backups.

Ransomware Evolution

Ransomware is not a new phenomenon and some variants existed as far back as 1989. Ransomware has constantly evolved and increased in sophistication to suit the end user landscape. Ransomware is not an issue that only affects Windows devices. Variants have been detected that also target Android, macOS and Linux, this can be dangerous as people tend to only protect their Windows devices.

Notable Ransomware Variants Include:

• 1989 – AIDS Trojan
• 2012 – Reveton
• 2013 – Cryptolocker
• 2014 – Simplocker and LockerPin (Android)
• 2015 – TeslaCrypt and Locky
• 2016 – KeRanger (macOS)
• 2017 – KillDisk (Linux)
• 2017 – WannaCryptor/WannaCry

Ransomware Prevention

You can do many things reduce your risk of a ransomware attack, a starting point is the list below:

• Ensure you have a backup
• Filter EXEs in email
• Disable files running from AppData/LocalAppData folders
• Disable RDP
• Update your software and operating systems
• Use a reputable security solution

How ESET Keeps You Safe From Ransomware

ESET Technology

ESET technology continually evolves to protect against the latest threats. ESET employs a multilayered strategy, not relying on a single protection point as a silver bullet. The most important points of protection for ransomware are: network attack protection, DNA detections and cloud malware system (ESET Live Grid).

Network Attack Protection: prevents the spread of ransomware by protecting against vulnerabilities

DNA Detections: performs deep analysis of code, extracting the “genes” that are responsible for its behaviour

ESET Live Grid: analyses submitted malware and provides results to endpoints without requiring an update.

Third Party Testing of ESET

ESET regularly participates in third party testing to validate that ESET technology is cutting edge.

In the first quarter of 2017, SE Labs tested the detection capabilities of the ESET Endpoint Security products. Their independent testing made it clear that ESET performs exceedingly well.

It important for a security solution to detect threats, but it is also important for it to not raise false alarms (false positives). False positives prevent your valid system and operational software from running and may crash your device. ESET seeks to deliver accuracy, detecting threats in a timely manner, while not raising false alarms.

Ransomware Reality Check Video