Ransomware attacks are on the rise due to several factors: unemployed hackers see it as easy money; organizations have weak security policies; more data is stored online; and pirated software contains malware. Ransomware encrypts users' files and demands payment for the decryption key. Victims should not panic, disconnect infected devices, avoid paying ransoms, and seek help from experts. Users have an ethical duty to help prevent future attacks through backups, updated security software, legal software, and education.

1. Mumbere Joab
RANSOMWARE ATTACKS
Case study: The Reveton Ransomware Attacks

2. Reveton

3. What is a Ransomware?
Ransomware is malware for data kidnapping or an exploit in which the
attacker encrypts the victim's data and demands payment for the
decryption key.

4. Why are Ransomware attacks on the rise?
 Rising Number Of Unemployed I.T Geeks.
As is the case with many crimes committed outside the Internet, money is a
major motivator for many cyber criminals. Especially when the dangers of
criminality are less apparent when you're hiding behind a network, the
perception of low risk and very high financial reward prompts many cyber
criminals to engage in Ransomware attacks
 Weak Organizational policies on privacy and access of I.T Infrastructure.
This is involves granting access to unauthorized people who may end up
using that opportunity to carryout the attack if they are able to access the severs ,
network or even workstations .
 Increasing use of the internet by organizations and individuals
The Increased use the internet by organizations and individuals to store and
share sensitive information creates a favorable conditions for the attackers to lay
there traps because they know how sensitive the information is to victim and
they assured of a big pay at the end of the day while on panics to restore their
information.
 Increasing use of counterfeit software especially in developing countries.
Mostly of these commonly know as Cracks have contain malicious scripts that
can be used to set a Ransomware attack on the users as long as they are
connected on the network

5. Why are Ransomware attacks on the rise?
 Structurally motivated attacks
Beyond the causes that motivate the attackers, the environment in
which the attack is committed also serves to explain the prevalence of
the phenomenon. While more and more personal and sensitive
information is stored online, this increases the potential rewards for a r
ansom attack. Neither computer security nor applications like email
filters have improved dramatically in terms of coverage. According to
the anti-virus manufacturer Norton, for example, as many as 41 percen
t of computers did not have up-to-date security protection in 2012.
 Personally motivated attacks
The attackers what they do, including their crimes is often the cause of
personal emotions and vendettas. From the disgruntled employee ,
installing a malware on office computers to a jealous boyfriend
hacking into a girlfriend's social media accounts or a teenager taking
down a school website just to prove that he could do it, many cyber
crimes are essentially crimes of passion committed over the Internet.
Many of these crimes, however, can still have very serious impacts and
cause considerable property damage.

6. What can you do to prevent Ransomware
attacks on your own computer?
• Make sure Your antivirus is updated with a real time protection mechanism and internet
Security plans .
• Always block Pop Ups from your web browsers since most of there attacks are triggered
through unnecessary pop ups.
• Always install updated Software patches from the Operating system venders because they
contain some of these security mechanisms that protect your computer from any possible
attack.
• For Organization they should have a well developed IT policy to restrict access to certain
untrusted sites to avoid any possible attacks.
• A good relationship between the company and IT officers is step number one toward avoid
ing any sorts on intended attacks
• Before you are attacked, a back and recover plan is always paramount for the safety of one
s data. So don’t wait to be attacked and then remember to backup
• Enable the ‘Show file extensions’ option in the Windows settings on your computer to ena
ble one see potentially dangerous files
• If you discover a rogue or unknown process on your machine, disconnect it immediately
from the internet or other network connections such as Wi-Fi this will prevent the infection
from spreading.

7. How do you think victims should
respond to Ransomware attacks?
 Don’t Panic :- Ransom attackers all they aim at is to make you panic so that before you
can realize that it was just a mare attack you find your self paying for what you didn’t
commit .
 Shutdown the infected machine to avoid further encryption of files.
 Disconnect the affected device from the network to a further attack on the other devices
on the network.
 Don’t pay up any amount of money since you already know that the guys are crooks
 Taking to a technician you trust for help.
 Try using boot-time antivirus Sophos Antivirus.
 Clean Up the infected Machine and use a data recovery software to recover your
information.
 For Organization follow the disaster recovery plan it could have a fast solution to avoid ma
ss loss of data and down times.

8. Do they have an ethical obligation
to future victims?
Yes they do..
 A Backup plan is always necessary before any attack to avoid data loss in case there is an
attack.
 Using an Updated antivirus and anti malware software is necessary to detect and block any
attacks .
 Computer users should avoid using counterfeited software because they are used as honey
ports by attacks.
 Computer users should enable the display of file extensions so that they can be able to tell
which files are dangerous to there computer systems as away to limit chance of being
attacked
 Research is necessary to keep computer users informed about the on going attacks, how
to prevents and solve these attacks in case they are meet.
 Internet users should always avoid responding positively to scareware for these are ways
through which ransom attacks are triggered