Ransomware Campagins

Question 1

1st installation

Answer 1

Crypto ransomware installs itself after boot up

Question 2

2nd contacting headquarters

Answer 2

Malware contacts a server belonging to an attacker or group

Question 3

3rd Handshake and Keys

Answer 3

The ransom client and server “handshake” and the server generates two cryptographic keys

Question 4

4 Encryption

Answer 4

The ransomware starts encrypting every file it finds with common file extensions.

Question 5

5 extortion

Answer 5

A screen displays giving a time limit to pay up before the criminals destroy the key to decrypt the files