Question

Research a Ransomware attack. In your discussion include: victim of attack, vector of infection, symptoms, variant of ransomware used, number of systems affected, cost of ransom (was it paid?), were the systems recovered (from backup or decrypted), etc.? Do you agree with the actions taken by the victim in response to the attack?

Answer 1

ransomware attack:-ransomware is a malicious software that infect our computer and impede the users access to it until a ransom is paid to unlock it.The ransom demanded for the every individual varies greatly depending on the information that they have.More sensitive information more ransom is demanded.

• ransomware attack is defined as a type of malware/malicious software is installed into your computer and this software will encrypt all your personal data and your computer gets locked until you pay some ransom to them.if you pay the ransom then they will give you the decryption key to unlock your system and money should be paid in a limited time which they provided.Otherwise,the decryption key gets expired and your gets locked.
• victim of attack:-The person who is affected by the ransomware is known as a "victim".
• vector of infection:-The majority of the ransomware is installed into our system mainly by the links that we are clicking without having proper understanding about what the link says,spam emails,opening the malicious websites.Malware also spreads through the malvertising and drive by downloads which doesn't need user to get involved inorder to install the ransomware.We doesn't know when our system gets affected by all these we can get affected.
• symptoms:-

1. The victim losses his/her files and also should pay the ransom inorder to get back their files.
2. If the victim system is blocked then he need to pay the ransom immediately to get the decrypt key to again access the system.
3. The victim losses the productivity.
4. The victim losses the IT costs,legal fees,network modifications.

• variant of ransomware used:-The ransomware used to was the CryptoLocker botnet,which is the oldest software.The CryptoLocker botnet is the most destructive form of ransomware because it has the strong encryption algorithms and so it is hard to decrypt the files .
• number of systems affected:-The number of systems infected was only one.The files in the system was encrypted.The data is hijacked.
• cost of ransom:-The cost of ransom was minimum $200-$400 but they have got the demand to pay $200.Immediately reacted to the demand and  paid the ransom and they had given me the decryption key.By using the decrypt key they got back their files.
• Yes,i agree with the actions taken by the victim in response to the attack because he/she responded to the demand quickly and got back their files and solved their issue