ransomware

Virus software that blackmails users by locking them out of their computer or encrypting their computer's files in some manner. Also known as a "cryptovirus" or "cryptotrojan," a typical ransomware approach that takes only a few seconds to accomplish is to encrypt the indexes in the file system. This disables access to all the data and programs in the computer because the file system is the doorway to everything in storage (see file system). The ransomware then demands payment in Bitcoin to restore the data.

A favorite ploy is an FBI message claiming the user has child pornography on the computer, and a fine must be paid or else risk arrest. After paying the blackmail on any of these ransomware attacks, the user's machine may or may not be restored.

CryptoLocker - An Insipiration
In 2013, the creators of CryptoLocker collected millions in ransom by infecting Windows PCs until its distribution was halted a year later by the FBI and Interpol. CryptoLocker was the inspiration for other ransomware variants (gotta love that entrepreneurial spirit!). See Petya and WannaCry.

Mobile Phones Too
In 2014, using the same FBI scare tactic, thousands of Android users found their phones locked with demands for payment. See scareware and wares.

Even Cities
In 2019, two Florida cities paid their attackers more than $1 million to remove ransomware. Cybercrooks are increasingly asking for hundreds of thousands of dollars when they have breached a large organization or government entity. If there is any bright side to this, more organizations both public and private, are developing or improving their backup and recovery programs. See disaster recovery and cybercrime.

Ransomware Protection
As a result of this delightful phenomenon, numerous firms such as Trend Micro, Symantic, Malwarebytes and Avast Software have added ransomware protection in their lines of security products. See RaaS.

FBI MoneyPak Ransomware

Imagine finding your computer frozen with an FBI alert saying you violated one or more video, music or software copyrights or that you distributed child pornography. It demands that you put $200 cash into a MoneyPak card and enter the card number within 72 hours to unlock your computer as well as prevent the initiation of a criminal case.

Copyright © 1981-2025 by The Computer Language Company Inc. All Rights reserved. THIS DEFINITION IS FOR PERSONAL USE ONLY. All other reproduction is strictly prohibited without permission from the publisher.

Mentioned in

References in periodicals archive

If the user follows through, the ransomware retrieves two downloads: the Dharma ransomware payload and an old version of anti-virus software from cyber security company ESET.

Hacker paralyses Dubai firm's computer systems, seeks ransom

McAfee researchers also observed actors behind ransomware attacks using anonymous email services to manage their campaigns versus the traditional approach of setting up command-and-control (C2) servers.

New ransomware grows 118% as cybercriminals adopt fresh tactics: report

1.4.1 Global Ransomware Protection Market Size Growth Rate by Type (2013-2025)

Global Ransomware Protection Industry Analysis 2019, Market Growth, Trends, Opportunities Forecast To 2024

Duie Pyle's case, systems engineers found that the Trojan virus was "dropped in" to its computer system on April 19, nearly two months before it triggered the ransomware attack that locked out users.

A. Duie Pyle CEO Opens Up About Ransomware Attack

"[W]ithin the last year, BBR services has seen a substantial increase in incidents involving both ransomware and banking Trojans."

Ransomware Attacks More Than Double in Q1 2019: Beazley

Upon a ransomware attack, the necessity and required scope of legal notifications require a careful organizational and forensic examination of whether the attacker was able to "access" or "acquire" the data.

Develop a prompt and coordinated response to ransomware attacks

Training users how to detect and react to these threats is a critical ransomware deterrent.

2019 'Cybersecurity Almanac: 100 Facts, Figures, Predictions And Statistics'

"While in years past we've seen a growing frequency of ransomware claims, the costs to recover and the demands for payment were not nearly as concerning as what we've seen so far this year," the report says.

Ransomware Demands Soar Along With Cyber Claim Costs: NAS Report

Backup vendors are responding to ransomware in one of two ways to this increasingly sophisticated malware.

Asigra Partners Choosing Preventative Over Reactive Strategies to Defeat Ransomware Attack-Loops[TM]

This is one of the key findings in Kaspersky Lab's annual ransomware and malicious crypto miners report, 2016-2018.

Victims of Malicious Crypto Miners Increase by 44% as 2.7 Million Internet Users Are Targeted in a Year: Kaspersky Lab