New types of Ransomware attacks are on the rise,protecting valuable data against such threats is essential to avoid loss of revenue. Ransomware can potentially put your valuable data at risk and therefore your business.The aim of Ransomware is to prevent you from using your computer and data until you pay a fee (the ransom) to the attackers. If you see a pop-up window or webpage warning you that your computer has been locked because of possible illegal activities, you might be a victim of Ransomware.
Police Ransomware also known as Lockscreen Ransomware
The Police Ransomware displays a ransom note, often claiming to be from the police, the FBI, or local law enforcement agency. Ransomware can even tell what country you are in and display a ransom note that looks like its from your local police force. The ransom note may claim that the computer was used to look at illegal websites,videos, or images and will try to frighten the victim into paying up by threatening to bring them to court. Victims are often too embarrassed to ask for help because the ransom note may say they were viewing porn ographic content. This type of Ransomware usually blocks access to your computer, by locking the screen. This type of Ransomware will not encrypt your data and is recoverable by an IT expert.
File encrypting Ransomware
File -encrypting Ransomware, such as CoinVault , CryptoWall, CryptoDefense, CryptorBit , Critroni, HowDecrypt etc, when infects a computer it uses strong encryption techniques to encrypt all your data files within a users hard drive and also all the shared drives connected to that computer. The Ransomware then demands to pay between $100 and $10,000USD to recover the encrypted data. Files encrypted this way are very difficult or impossible to recover.
What can you do if you are the victim?
It is not advisable to pay ransom as there is no guarantee that they will unlock your files. In most cases all they want is your money and your bank card details. Follow the instructions below there may be good chance you could recover your files:
If you are victim of police Ransomware attack then there are number of ways it can be removed. Most reputable antivirus companies provide information about this malware and their removal. It is best to contact your local IT expert. In most cases data infected by police Ransomware can be recovered.
However if you are a victim of File-encrypting Ransomware it is going to be very difficult or impossible to recover the encrypted data. Private researchers such as Vildoza provide free tools and information. If you are victim of CoinVault then the Kaspersky blog has published a method of decrypting the files. It is best to pass these information to your IT expert if you are not technically competent. Please do email us if you need any further help or assistance.
How to prevent Ransomw are?
Backup, Backup, backup!
Ensure that regular backup is carried out. It is important to isolate the backup data from the computer as soon as backup is completed. If left connected to the computer prenatally the backup data will also be infected. If possible keep more than one copy of the backup at different locations.
The best defence measure against Ransomware is creating awareness within your organisation. Most viruses are introduced by opening infected attachments or clicking on links to malware usually contained in spam emails. Do not click on website links and .exe files.
Use premium antivirus software, the free ones are free for a reason; they are just not good enough. Make sure your antivirus is up to date.
Update your PC or tablet with latest security updates. Remember that all devices, including Macs, are venerable to malware attack not just PCs.