Cyberstudy
PDF p.341 In progress

Ransomware, Crypto-Malware, and Logic Bombs

Open PDF at p.341 8 flashcards

Summary

PDF p.341

Ransomware is malware that extorts money by making data or systems inaccessible. Crypto-malware includes ransomware that encrypts files and cryptojacking malware that hijacks resources for cryptocurrency mining. Logic bombs are malware that trigger based on specific conditions.

Detailed explanation

PDF p.341
  • Ransomware
    • Function: Extorts money by making systems or data unavailable.
    • Methods: Displays threatening messages, blocks access, demands payment via wire transfer, cryptocurrency, or premium rate phone lines.
    • Scareware: Displays alarming messages to trick users into thinking their system is compromised.
  • Crypto-Ransomware
    • Function: Encrypts data files on fixed, removable, and network drives.
    • Example: CryptoLocker encrypts files and demands payment for the decryption key.
    • Mitigation: Difficult to mitigate without backups.
  • Cryptojacking Malware
    • Function: Hijacks host resources for cryptocurrency mining.
    • Process: Uses computing resources to perform calculations necessary for minting new digital coins.
    • Execution: Often performed across botnets.
  • Logic Bombs
    • Function: Triggers based on specific conditions (time, date, or user/system event).
    • Example: A script left by a disgruntled administrator that runs if their account is deleted.
    • Detection: Difficult for antivirus software to detect.

Important terms

taken from the text above
Scareware
Displays alarming messages to trick users into thinking their system is compromised.
Execution
Often performed across botnets.

What I should remember

Key Points PDF p.341
  • Ransomware
    • Extortion: Makes data/systems unavailable, demands payment.
    • Methods: Threatening messages, scareware.
  • Crypto-Ransomware
    • Encryption: Encrypts files, demands payment for decryption.
    • Example: CryptoLocker.
  • Cryptojacking Malware
    • Resource Hijacking: Uses host resources for crypto-mining.
    • Execution: Often via botnets.
  • Logic Bombs
    • Trigger Conditions: Time, date, user/system events.
    • Example: Scripts left by disgruntled employees.
    • Detection: Hard to detect with antivirus software.