Ransomware attacks have been very common in the recent years especially in 2016, 2017 and last year. Although they haven’t hit the headlines lately, ransomware attacks still wreak havoc, and now they have shifted into other areas such as cryptocurrency. They can also go undetected till an attack has occurred due to recent upgrades and technological changes cybercriminals are building into them.
什麼是勒索軟體？
Ransomware is a family of malware which generally decrypts or wipes off your files and then demands some hefty amount of money for a decryption key or for your files to be restored. In the recent years, once you have been attacked by ransomware, you get a note saying “your files have been encrypted and to access them, pay a certain amount of cryptocurrency to a given address.”
Most ransomware attacks are propagated through networks, or via Trojans that are disguised as legitimate files. Others have worm abilities and can move through networks and replicate themselves without user interactions.
The most commonly known variants of ransomware are encrypting ransomware – most common, non-encrypting ransomware – this restricts access to files but doesn’t encrypt them, leak ware – this type of ransomware also doesn’t encrypt your files but threatens to publish your sensitive information online, and lastly, mobile ransomware – this type attacks mobile operating systems.
如何保護自己免受勒索軟體的侵害？
以下是一些提示，可確保您更好地應對勒索軟體攻擊;
- Do regular backups; Ransomware attacks are after data and having a good backup in the first place ensure you are immune to these attacks. But even backups can be attacked by ransomware if they are stored in the devices or connected to the internet. To avoid this, back up your data into a hard drive and disconnect it from your device once the backing process has finished.
- Be cyber aware; Ransomware attacks begin as a simple download, and in a matter of seconds, a whole organization can be infected. Always be keen on what you download online, avoid suspicious links and never open email attachments from people you don’t know. Also, avoid clicking on ads.
- Install the latest software updates and security patches; Ransomware attacks exploit vulnerabilities that are not patched. For instance, the Wanna Cry ransomware attack became a worldwide menace, and it attacked organizations which did not apply an update released by Microsoft earlier on.
如果您是勒索軟體攻擊的受害者該怎麼辦
大多數受害者進入恐慌模式，由於他們想要取回他們的文件，他們會急於支付贖金。有時這是唯一的選擇，這是一個好主意，有時這是一個壞主意。我們將詳細介紹為什麼付款不是一個好主意。但首先讓我們看看你能做什麼;
- 斷開與互聯網和您連接的任何網路的連接。這可以防止勒索軟體在具有蠕蟲能力的情況下傳播。
- 確保它不是恐嚇軟體;一些勒索軟體攻擊不會加密用戶檔，即使他們聲稱這樣做。始終檢查您的檔是否無法訪問。
- Use a decryptor; antivirus companies have decryptor tools that can help you recover files encrypted by certain.
- Restore from backup; do a fresh install and restore your files to a state before the ransomware attacked.
- 報告事件;讓有關當局甚至您周圍的人知道有勒索軟體在四處走動是一種很好的做法。
為什麼你永遠不應該付錢？
您可能會被迫支付贖金以取回您的檔，但這就是您不應該這樣做的原因。
- You might not get your files back; at times the ransomware may change as it propagates and loses its original purpose. In this case, even the authors don’t know how to decrypt your files, and they will continue demanding more money for nothing.
- 你會成為一個容易的目標。一旦你付款，你就會增加再次受到攻擊的機會。
Always use a VPN – IPBurger VPN
If you like accessing free public Wi-Fi, ensure that you have your VPN turned on. Some malware can be injected via the free public Wi-Fi, and some of it might be ransomware. A VPN encrypts your internet traffic and tunnels it through a secure server to its destination. The encryptions ensure that your internet traffic is not visible to prying eyes such as malicious actors.
