Present days Ransomware is the of the most major threat that peoples are considering. Peoples are now a days are not caring so much about other malwares and viruses as they concering too much for Ransomware.
Obiously their concerns matters. Ransomwares are such kind of malwares that when infects any computer it encrypts all the files that are generally used by peoples everyday. Here all the files means that those files with certain extentions like .txt, .pdf, docx, .jpg, .psd .mp4, avi and much more.
You might be wondering and asking yourself who makes the Ransomwares? Ransomwares are made by those groups of peoples having advance and extraordinary knowledge about programming. And they use their programming skills to do some kinds of evil activities like creating Ransomwares. Once they convince someone to run their evil Ransomare, it encrypts all their files present in the computer and shows a screen and provide them a html based webpage or directly textfile or all to tell them that their all the files present in their computers are locked. To decrypt their files and to get them like previously working condition for that they need key which is stored in malware authors server. To get the a key victims have to pay a certain amount of money in Bitcoin cryptocurrency form. Once victims payment is confirmed by those malware authors then they send the key to their victims or their malware program automatically starts to decrypts their files.
Sometime it is noticed that even after paying and decrypting all the files some files still don't works and they are damaged permanently.
Few months back on May 2017 there was Massive ransomware attack known as WannaCry ransomware attack happened worldwide. The attack began on Friday, 12 May 2017 and within a day was reported to have infected more than 2,30,000 computers in over 150 countries.
Below is the pic of WannaCry ransomware, have a look:
WannaCry propagates using EternalBlue, an exploit of Windows' Server Message Block (SMB) protocol. Much of the attention and comment around the event was occasioned by the fact that the U.S. National Security Agency (NSA) had already discovered the vulnerability, but used it to create an exploit for its own offensive work, rather than report it to Microsoft. Microsoft eventually discovered the vulnerability, and on Tuesday, March 14, 2017, they issued security bulletin MS17-010, which detailed the flaw and announced that patches had been released for all Windows versions that were currently supported at that time, these being Windows 7, Windows 8.1, Windows 10, Windows Server 2008, Windows Server 2012, and Windows Server 2016, in addition to Windows Vista (which had recently ended support). However, many Windows users had not installed the patches when, two months later on May 12, 2017, WannaCry used the EternalBlue vulnerability to spread itself. The next day, Microsoft released emergency security patches for Windows 7 and Windows 8.
This was just the examples, Now lets go to our topic.
To get the victims to run their malware program, they use different types of techniques to fool and get the victims. One of the technique that they use is what we will going to discuss in this topic today and also we will know how be safe.
The most common technique that they use is spam mail where they attach their malware and it is disguised as pdf, docs, xlsx etc. The mail appear such a way that it looks to be a legit mail from any organisation or courier delivery company. Without thinking for a moment victim realize it as original file and they download that attachment and run it. After running that malware program it instantly encrypts all the files in the computer and mentioned above
