{"id":4242,"date":"2023-11-03T10:12:08","date_gmt":"2023-11-03T09:12:08","guid":{"rendered":"https:\/\/rock-the-prototype.com\/%category%\/ransomware\/"},"modified":"2024-02-22T08:27:10","modified_gmt":"2024-02-22T07:27:10","slug":"ransomware","status":"publish","type":"encyclopedia","link":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/","title":{"rendered":"Ransomware"},"content":{"rendered":"<p><\/p><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\"><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1144px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_1_1 1_1 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:100%;--awb-margin-top-large:0px;--awb-spacing-right-large:1.92%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:1.92%;--awb-width-medium:100%;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-1\"><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Inhaltsverzeichnis<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #ffffff;color:#ffffff\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #ffffff;color:#ffffff\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#1_What_is_ransomware\" >1 What is ransomware?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#2_mode_of_operation\" >2. mode of operation<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#21_Technical_analysis_of_how_ransomware_works\" >2.1 Technical analysis of how ransomware works<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#22_Components_and_parts_of_ransomware\" >2.2 Components and parts of ransomware<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#2_the_creation_process_of_this_malware\" >2. the creation process of this malware<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#3_types_of_ransomware\" >3. types of ransomware<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#31_Locker_ransomware\" >3.1 Locker ransomware<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#32_Crypto-ransomware\" >3.2 Crypto-ransomware<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#33_Encryption_Trojans\" >3.3 Encryption Trojans<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#4_effects\" >4. effects<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#5_Known_ransomware_attacks\" >5 Known ransomware attacks<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#6_preventive_measures_and_reactions\" >6. preventive measures and reactions:<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#61_Preventive_methodology_for_protection_against_ransomware\" >6.1 Preventive methodology for protection against ransomware<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#62_Preventive_measures\" >6.2 Preventive measures<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#63_Ransomware_detection\" >6.3. Ransomware detection<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#64_Data-centered_approaches\" >6.4 Data-centered approaches<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#65_Process-centered_approaches\" >6.5 Process-centered approaches<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#66_Event-based_detection\" >6.6 Event-based detection<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#67_Machine_Learning-Based_Detection\" >6.7 Machine Learning-Based Detection<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#Delayed_detection\" >Delayed detection<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#Early_detection\" >Early detection<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#68_Techniques_for_building_early_detection_models\" >6.8 Techniques for building early detection models<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#7_ransomware_history\" >7. ransomware history<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#8_summary\" >8. summary<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"1_What_is_ransomware\"><\/span>1 What is ransomware?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><strong><a href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/\" target=\"_blank\" title=\"Ransomware is therefore blackmail software, also known as an encryption Trojan. Ransomware is one of the most dangerous cyber attacks and is currently widespread. Ransomware is therefore blackmail software, also known as an encryption Trojan, which encrypts data or blocks access rights to directories, files and applications on attacked servers and computers. A ransom, typically in a cryptocurrency, is demanded for decryption. What is the most effective way to protect ourselves against ransomware attacks? Find out more now...\" class=\"encyclopedia\">Ransomware<\/a><\/strong> is a type of malware that encrypts data on a victim&rsquo;s computer or locks access to the computer itself and then demands a ransom from the victim to restore the data or unlock access.<\/p>\n<p>Ransomware is therefore <strong>blackmail software<\/strong>, also known as an <strong>encryption Trojan<\/strong>, which encrypts data or blocks access rights to directories, files and applications on attacked servers and computers. A ransom, typically in a cryptocurrency, is demanded for decryption.<\/p>\n\n<h2><span class=\"ez-toc-section\" id=\"2_mode_of_operation\"><\/span><strong>2. mode of operation<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Understanding how ransomware works is key to effectively preventing and combating it. Once activated on a computer, the ransomware encrypts important files or locks the entire computer and displays a ransom note.<\/p>\n<div id=\"attachment_4213\" style=\"width: 1802px\" class=\"wp-caption aligncenter\"><img decoding=\"async\" aria-describedby=\"caption-attachment-4213\" class=\"size-full wp-image-4212\" src=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung.jpg\" alt=\"Encryption Trojan - Cyber attack with ransom extortion\" width=\"1792\" height=\"1024\" srcset=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung-200x114.jpg 200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung-300x171.jpg 300w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung-400x229.jpg 400w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung-600x343.jpg 600w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung-768x439.jpg 768w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung-800x457.jpg 800w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung-1024x585.jpg 1024w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung-1200x686.jpg 1200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung-1536x878.jpg 1536w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Verschluesselungstrojaner_Cyberangriff_mit_Loesegeld_Erpressung.jpg 1792w\" sizes=\"(max-width: 1792px) 100vw, 1792px\"><p id=\"caption-attachment-4213\" class=\"wp-caption-text\">Encryption Trojan &ndash; Cyber attack with ransom extortion<\/p><\/div>\n<p>Once activated on a computer, the ransomware encrypts important files or locks the entire computer. A ransom note is then displayed asking the victim to pay a certain amount, often in cryptocurrency, to regain access.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"21_Technical_analysis_of_how_ransomware_works\"><\/span><strong>2.1 Technical analysis of how ransomware works<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ransomware is a type of malware that encrypts data on the infected system or blocks access to the system and then demands a ransom from the user to restore the data or <a href=\"https:\/\/rock-the-prototype.com\/en\/learn-programming\/release\/\" target=\"_blank\" title=\"A release is a defined software version of an application. A software release is therefore a software version defined for users with a defined range of functions and maturity level. An initial software release generally represents the first generation of a new or improved software application.\" class=\"encyclopedia\">release<\/a> access. This <a href=\"https:\/\/dl.acm.org\/doi\/abs\/10.1145\/3514229\" target=\"_blank\" rel=\"noopener\">type of attack<\/a> has proven to be particularly damaging and effective in recent years.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"22_Components_and_parts_of_ransomware\"><\/span><strong>2.2 Components and parts of ransomware<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li><strong>Encryption modules:<\/strong> Most ransomware variants contain robust encryption modules that use standard encryption algorithms to encrypt the victim&rsquo;s files. The AES (Advanced Encryption Standard) or RSA (Rivest-Shamir-Adleman) algorithms are frequently used.<\/li>\n<li><strong>Bootloader:<\/strong> Some ransomware variants overwrite the master boot record (MBR) of the infected system, causing the system to display a ransom note at startup instead of loading the operating system.<\/li>\n<li><strong>Command &amp; Control (C&amp;C) server communication:<\/strong> After infection, the ransomware often attempts to connect to an external server, for example to retrieve the encryption key or report the successful attack.<\/li>\n<li><strong>Decryption module:<\/strong> This allows the attacker to provide a decryption key after payment of the ransom, although in many cases the data is not decrypted, even after payment.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"2_the_creation_process_of_this_malware\"><\/span><strong>2. the creation process of this malware<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li><strong>Concept:<\/strong> Attackers identify a target and develop a strategy. This may be due to potential high returns, such as with hospitals or government agencies, or simply due to the vulnerability of certain systems. The design is often based on vulnerabilities found in existing software components.<\/li>\n<li><strong><a href=\"https:\/\/rock-the-prototype.com\/en\/learn-programming\/programming\/\" target=\"_blank\" title=\"What is programming? When programming, a programmer creates a software program that can run on a machine. The code is created in one of the formally defined computer languages - which are countless, such as Java, PHP, C++ or C#, Perl and many many more.\" class=\"encyclopedia\">Programming<\/a>:<\/strong> This is where the actual ransomware is developed. Attackers often misuse open source programs or buy ransomware kits on the black market.<\/li>\n<li><strong>Distribution:<\/strong> The ransomware is distributed via various means. The most common methods include phishing emails, infected software downloads or exploit kits that take advantage of known security vulnerabilities.<\/li>\n<li><strong>Infection:<\/strong> Once on the system, the ransomware begins its malicious activity. It can encrypt files, block system access or both.<\/li>\n<li><strong>Ransom demand:<\/strong> After encrypting the files, the ransomware displays a message asking the victim to pay, often in a digital currency such as Bitcoin.<\/li>\n<li><strong>Decryption (optional):<\/strong> If the victim pays, the attacker can provide a decryption key or tool. However, there is no guarantee.<\/li>\n<\/ul>\n<p>It is important to note that ransomware is constantly evolving to avoid detection and be more effective. Understanding how they work is crucial to developing protective measures and fending off these threats. It is also important to understand that not all ransomware infections or attacks are the same; they vary depending on the target, method and even the motives of the attacker.<\/p>\n<\/div><a class=\"fusion-modal-text-link\" data-toggle=\"modal\" data-target=\".fusion-modal.IT-Security in Software Development - Rock the Prototype Podcast - Softwareentwicklung &amp; Prototyping\" href=\"#\"><iframe class=\"lazyload\" style=\"border-radius: 12px;\" src=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27100%27%20height%3D%27352%27%20viewBox%3D%270%200%20100%20352%27%3E%3Crect%20width%3D%27100%27%20height%3D%27352%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-orig-src=\"https:\/\/open.spotify.com\/embed\/episode\/3Uis0uViBdKlYxYS2nm1XU?utm_source=generator\" width=\"100%\" height=\"352\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/a>\n<div class=\"fusion-text fusion-text-2\"><h2><span class=\"ez-toc-section\" id=\"3_types_of_ransomware\"><\/span><strong>3. types of ransomware<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"31_Locker_ransomware\"><\/span><strong>3.1 Locker ransomware<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<blockquote>\n<p><strong>Locks the user out of the operating system and demands a ransom to restore access.<\/strong><\/p>\n<\/blockquote>\n<p>Locker ransomware is a type of malware that aims to deny users access to their operating system or certain functions of their computer. As soon as it is activated, this ransomware locks the screen or prevents access to important system functions. Victims usually see a notification or ransom note on their screen telling them that their system is locked and will only be unlocked if they pay a ransom. This type of ransomware is particularly threatening as it can block access to the entire system, making normal operation and data recovery difficult.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"32_Crypto-ransomware\"><\/span><strong>3.2 Crypto-ransomware<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<blockquote>\n<p><strong>Encrypts the user&rsquo;s valuable files and demands a ransom for the decryption key.<\/strong><\/p>\n<\/blockquote>\n<p>Crypto-ransomware, one of the most widespread and damaging forms of ransomware, aims to encrypt the user&rsquo;s important files. It infiltrates the system, identifies important file formats (such as documents, images and databases) and encrypts them with a strong encryption algorithm. Victims are then shown a ransom note stating that their files can only be decrypted against payment, usually in the form of cryptocurrency. Victims have no guarantee that the files will be restored after payment, which makes this type of ransomware particularly risky.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"33_Encryption_Trojans\"><\/span><strong>3.3 Encryption Trojans<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<blockquote>\n<p><strong>This type of ransomware encrypts files and folders on the infected system and then demands a ransom for the decryption key.<\/strong><\/p>\n<\/blockquote>\n<p>The encryption Trojan, a subspecies of crypto-ransomware, specializes in encrypting files and folders on infected systems. After infection, the malware scans the system for certain file types and encrypts them. A ransom note is then displayed, informing users that their files have been encrypted and can only be restored if they pay a ransom. The key for decrypting the files is usually controlled by the attackers. This type of ransomware can be particularly harmful, as it not only prevents access to individual files, but often also attacks backups and shadow copies to make it difficult to restore the data.<\/p>\n<div id=\"attachment_4217\" style=\"width: 1802px\" class=\"wp-caption aligncenter\"><img decoding=\"async\" aria-describedby=\"caption-attachment-4217\" class=\"size-full wp-image-4216\" src=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur.jpg\" alt=\"Ransomware - hacker attacks with devastating impact on data centers and cloud infrastructure\" width=\"1792\" height=\"1024\" srcset=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur-200x114.jpg 200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur-300x171.jpg 300w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur-400x229.jpg 400w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur-600x343.jpg 600w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur-768x439.jpg 768w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur-800x457.jpg 800w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur-1024x585.jpg 1024w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur-1200x686.jpg 1200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur-1536x878.jpg 1536w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Hackerangriff-mit-verherrender-Auswirkung-fuer-Rechenzentren-und-Cloud-Infrastruktur.jpg 1792w\" sizes=\"(max-width: 1792px) 100vw, 1792px\"><p id=\"caption-attachment-4217\" class=\"wp-caption-text\">Ransomware &ndash; hacker attacks with devastating impact on data centers and <a href=\"https:\/\/rock-the-prototype.com\/en\/cloud-computing-cloud-technology\/cloud\/\" target=\"_blank\" title=\"What is cloud? Cloud or cloud computing moves data and programs from desktop PCs or servers in a company to remote cloud servers. Cloud storage therefore consists of a standard server network in a cloud data center or distributed across several cloud server locations.\" class=\"encyclopedia\">cloud<\/a> infrastructure<\/p><\/div>\n<h2><span class=\"ez-toc-section\" id=\"4_effects\"><\/span><strong>4. effects<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The impact of ransomware can be devastating, from lost data and money to business interruption in large companies or public institutions.<\/p>\n<p>The consequences of a ransomware attack are always far-reaching, with not only data loss but also significant financial and operational disruption.<\/p>\n<p>It can also cause considerable financial losses, legal consequences and reputational damage.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"5_Known_ransomware_attacks\"><\/span><strong>5 Known ransomware attacks<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Some of the most well-known ransomware attacks are WannaCry, Petya and NotPetya, which infected thousands of computers worldwide and caused significant damage<strong>.7 Preventive measures and responses<\/strong>:<\/p>\n<ul>\n<li><strong>Regular backups:<\/strong> Keep regular backups of all important files and data.<\/li>\n<li><strong>Update your software:<\/strong> security patches protect against known vulnerabilities.<\/li>\n<li><strong>Be careful with e-mail attachments and links:<\/strong> Do not open suspicious attachments or click on suspicious links.<\/li>\n<li><strong>Use of security software:<\/strong> A good antivirus and anti-malware program can help prevent many ransomware infections.<\/li>\n<li><strong>Education:<\/strong> Educate employees and users about the dangers of ransomware and how to avoid it.<\/li>\n<\/ul>\n<div id=\"attachment_4221\" style=\"width: 1802px\" class=\"wp-caption aligncenter\"><img decoding=\"async\" aria-describedby=\"caption-attachment-4221\" class=\"size-full wp-image-4220\" src=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken.jpg\" alt=\"Ransomware cyberattack - Cybercrime attacks with devastating consequences\" width=\"1792\" height=\"1024\" srcset=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken-200x114.jpg 200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken-300x171.jpg 300w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken-400x229.jpg 400w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken-600x343.jpg 600w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken-768x439.jpg 768w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken-800x457.jpg 800w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken-1024x585.jpg 1024w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken-1200x686.jpg 1200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken-1536x878.jpg 1536w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Cyberangriff-Cybercrime-Attacken.jpg 1792w\" sizes=\"(max-width: 1792px) 100vw, 1792px\"><p id=\"caption-attachment-4221\" class=\"wp-caption-text\">Ransomware cyberattack &ndash; <a href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/cybercrime\/\" target=\"_blank\" title=\"What is cybercrime? Cybercrime refers to illegal activities that are carried out using the internet or other forms of digital communication. This includes a variety of cybercrimes such as cyber fraud, cyber theft of digital identities, the spread of malware, unauthorized access to data and systems, and attacks on network infrastructures. Cybercrime uses digital technologies as a means to an end. Find out more now!\" class=\"encyclopedia\">Cybercrime<\/a> attacks with devastating consequences<\/p><\/div>\n<h2><span class=\"ez-toc-section\" id=\"6_preventive_measures_and_reactions\"><\/span><strong>6. preventive measures and reactions:<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>While ransomware is a constant threat, there are proven measures that organizations and individuals can take to protect themselves.<\/p>\n<p>The measures include<\/p>\n<ul>\n<li>regular backups,<\/li>\n<li>Updating the software and<\/li>\n<li>Be careful with e-mail attachments<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"61_Preventive_methodology_for_protection_against_ransomware\"><\/span>6.1 Preventive methodology for protection against ransomware<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Academic literature, such as that by <a href=\"https:\/\/www.mdpi.com\/1424-8220\/22\/5\/1837\" target=\"_blank\" rel=\"noopener\">Alqahtani and Sheldon<\/a>, discusses different approaches to mitigating this threat and preventative measures and detection methods. Preventive protection measures such as regular backups can be helpful, but in many cases backups are also encrypted by ransomware. Therefore, ransomware detection is an alternative that can help identify malicious encryption at an early stage.<\/p>\n<p>Two <strong>main approaches to detection <\/strong>are <strong>data-centric<\/strong> and <strong>process-centric<\/strong>. Data-centric approaches focus on monitoring data modifications, using techniques such as entropy measurement and decoy files. Process-centered approaches, on the other hand, monitor ongoing processes for suspicious activities. These can be based either on certain predefined events associated with ransomware or on <a href=\"https:\/\/rock-the-prototype.com\/en\/artificial-intelligence-ai\/machine-learning\/\" target=\"_blank\" title=\"Machine learning is a branch of artificial intelligence (AI) that deals with the development of algorithms and models that enable computers to learn from experience and data, recognize patterns and make predictions without being explicitly programmed. The aim of machine learning is to enable computers to learn independently from data and extract information in order to master complex tasks. We explain which concepts are used to do this and how predictions can be made by adapting models to existing data.\" class=\"encyclopedia\">machine learning<\/a> algorithms that identify behavioral patterns in the runtime data generated by malicious processes.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"62_Preventive_measures\"><\/span><strong>6.2 Preventive measures<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li>Initiatives such as &ldquo;No More Ransom&rdquo; help victims to recover encrypted files.<\/li>\n<li>Regular backups are recommended as the main measure, although ransomware can also encrypt backups.<\/li>\n<li>Guessing the decryption key is almost impossible in advanced attacks.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"63_Ransomware_detection\"><\/span><strong>6.3. Ransomware detection<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li>Ransomware detection can help to identify malicious encryption at an early stage.<\/li>\n<li>There are data-centric and process-centric techniques, which are respectively divided into event-based and machine learning-based approaches.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"64_Data-centered_approaches\"><\/span><strong>6.4 Data-centered approaches<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li>The aim is to track affected data sources.<\/li>\n<li>Techniques include measuring the entropy (clutter) of files and the use of decoy files.<\/li>\n<li>Entropy measurement: Efficient encryption increases the entropy of a file, which can be used to detect ransomware.<\/li>\n<li>Decoy files (honey files): Files that are embedded in the user&rsquo;s system to detect changes. However, this method has limitations and can trigger many false alarms.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"65_Process-centered_approaches\"><\/span><strong>6.5 Process-centered approaches<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li>Monitoring of running processes and search for suspicious activities.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"66_Event-based_detection\"><\/span><strong>6.6 Event-based detection<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li>Searches for certain indicators of an impending ransomware attack, such as the generation of an encryption key.<\/li>\n<li>Methods include the monitoring of command and control (C&amp;C) traffic and the monitoring of cryptography-related APIs.<\/li>\n<li>The effectiveness of this method is limited as it requires prior knowledge of the encryption techniques used by ransomware and there is a high probability of false positives.<\/li>\n<\/ul>\n<p>The threat of ransomware requires both preventive measures and advanced detection techniques. No method is perfect and there is a constant need for research and development in this area to increase protection against such attacks.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"67_Machine_Learning-Based_Detection\"><\/span>6.7 Machine Learning-Based Detection<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li><strong>Machine learning in ransomware detection<\/strong>: Many studies have used machine learning (ML) to detect crypto-ransomware.<\/li>\n<li><strong>Classification of algorithms<\/strong>: There are two main types of classifiers: individual and ensemble-based classifiers.\n<ul>\n<li><strong>Individual classifiers<\/strong>: Include algorithms such as Support Vector Machines (SVM), Logistic Regression, Decision Tree and Deep Neural Networks.<\/li>\n<li><strong>Ensemble-based classifiers<\/strong>: Combine several classification algorithms, e.g. Bagging, AdaBoost and Random Forests.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4><span class=\"ez-toc-section\" id=\"Delayed_detection\"><\/span><strong>Delayed detection<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<ul>\n<li><strong>Definition<\/strong>: Detects malware after the entire runtime data set has been executed.<\/li>\n<li><strong>Problem<\/strong>: Delayed detection requires all data from the running malware process to accurately determine if it is malicious, which can lead to late and ineffective detections.<\/li>\n<\/ul>\n<h4><span class=\"ez-toc-section\" id=\"Early_detection\"><\/span><strong>Early detection<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<ul>\n<li><strong>Definition<\/strong>: Aims to detect crypto-ransomware attacks before they encrypt data.<\/li>\n<li><strong>Main focus<\/strong>: Previous studies have extracted data based on a fixed time for all instances, which is not ideal as it can ignore the start of encryption in many cases.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"68_Techniques_for_building_early_detection_models\"><\/span>6.8 Techniques for building early detection models<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li><strong>Importance<\/strong>: Due to the irreversible nature of crypto-ransomware attacks, early detection is crucial.<\/li>\n<li><strong>Process<\/strong>: Early detection models start with the extraction and selection of discriminative features, which are then used to train the model.\n<ul>\n<li><strong>Feature extraction<\/strong>: Can be numerical or textual. Textual data is converted into a numerical form by tokenization.<\/li>\n<li><strong>Feature selection<\/strong>: Here, informative features are selected to reduce the data dimensionality and prevent overfitting.<\/li>\n<li><strong>Model training\/testing<\/strong>: An ML classifier is trained with the previously extracted and selected data and features.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong>Design<\/strong>: The generic design of an early detection model for crypto-ransomware has three components: Preprocessing and Feature Selection; Feature Selection; and Training\/Testing.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"7_ransomware_history\"><\/span><strong>7. ransomware history<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The first ransomware attacks can be traced back to the late 1980s, but they only became a significant threat in the 2010s. With the spread of Bitcoin and other cryptocurrencies, it has become easier for cybercriminals to receive payments anonymously, leading to an increase in ransomware attacks.<\/p>\n<p>While ransomware is a widespread threat today, it has a comparatively short but intense history.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"8_summary\"><\/span>8. summary<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>In our digital age, <strong>data security<\/strong> is of paramount importance. <strong>Ransomware<\/strong> has established itself as one of the most dangerous types of cyber threats. This malware is a type of malware that encrypts data on a victim&rsquo;s computer or blocks access to the computer itself and then demands a ransom from the victim to restore the data or release access.<\/p>\n<p><strong>Ransomware attacks<\/strong> always have devastating consequences for companies and individuals when they take effect.<\/p>\n<div id=\"attachment_4215\" style=\"width: 1802px\" class=\"wp-caption aligncenter\"><img decoding=\"async\" aria-describedby=\"caption-attachment-4215\" class=\"size-full wp-image-4214\" src=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich.jpg\" alt=\"Ransomware Threats - Cybercrime extortion scenarios that threaten our security infrastructure worldwide\" width=\"1792\" height=\"1024\" srcset=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich-200x114.jpg 200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich-300x171.jpg 300w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich-400x229.jpg 400w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich-600x343.jpg 600w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich-768x439.jpg 768w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich-800x457.jpg 800w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich-1024x585.jpg 1024w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich-1200x686.jpg 1200w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich-1536x878.jpg 1536w, https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-threats-Cybercrime-weltweit-erfolgreich.jpg 1792w\" sizes=\"(max-width: 1792px) 100vw, 1792px\"><p id=\"caption-attachment-4215\" class=\"wp-caption-text\">Ransomware Threats &ndash; Cybercrime extortion scenarios that threaten our security infrastructure worldwide<\/p><\/div>\n<p>The consequences range from massive data loss to financial losses and business interruptions. The occurrence of these <strong>attacks<\/strong> has <strong>increased exponentially in recent years<\/strong>, which underlines the acute need for action.<\/p>\n<p>It is vital that organizations and individuals implement effective protective measures immediately to secure their digital assets and protect themselves from this growing cyber threat.<\/p>\n<p><strong>Failure to act proactively could have devastating and long-term effects that go far beyond the immediate attack.<\/strong> <strong>It is no longer a question of whether you will be attacked, but when.<\/strong>  Therefore, the implementation of security measures is no longer optional, but must be a priority.<\/p>\n<\/div><div class=\"fusion-video fusion-youtube\" style=\"--awb-max-width:800px;--awb-max-height:450px;--awb-align-self:center;--awb-width:100%;\"><div class=\"video-shortcode\"><priv-fac-lite-youtube class=\"fusion-hidden lty-load\" data-privacy-type=\"youtube\" videoid=\"So-e6AjKwng\" params=\"wmode=transparent&amp;autoplay=1&amp;enablejsapi=1\" title=\"Rock the Prototype Podcast IT Security Special - Cybercrime-Story im Hoerspiel\" data-button-label=\"Play Video\" width=\"800\" height=\"450\" data-thumbnail-size=\"auto\" data-no-cookie=\"on\"><\/priv-fac-lite-youtube><div class=\"fusion-privacy-placeholder\" style=\"width:800px; height:450px;\" data-privacy-type=\"youtube\"><div class=\"fusion-privacy-placeholder-content\"><div class=\"fusion-privacy-label\">For privacy reasons YouTube needs your permission to be loaded. For more details, please see our <a class=\"privacy-policy-link\" href=\"https:\/\/rock-the-prototype.com\/datenschutzerklaerung\/\" rel=\"privacy-policy\">Datenschutzerkl&auml;rung<\/a>.<\/div><button data-privacy-type=\"youtube\" class=\"fusion-button button-default fusion-button-default-size button fusion-privacy-consent\">I Accept<\/button><\/div><\/div><\/div><\/div>\n<div class=\"fusion-text fusion-text-3\" style=\"--awb-margin-top:4%;\"><h2>IT-Security Special Cybercrime Hoerspiel im Podcast<\/h2>\n<p>In unserer neuesten Podcast-Folge tauchen wir in eine Welt ein, in der KI-gesteuerte Hackerangriffe die Cybersecurity auf die Probe stellen. Erlebe einen digitalen Krieg, in dem synchronisierte Cyberangriffe die globale Infrastruktur bedrohen und IP-Adressen zum Spielball werden. Begleite Anna und Simon auf ihrer spannenden Reise durch die tiefen Weiten des Cybercrime.<\/p>\n<h3>Fiction versus Realit&auml;t<\/h3>\n<p>In der aufregenden Welt unseres Cybercrime-H&ouml;rspiels treffen Anna und Simon auf Herausforderungen, die unsere Vorstellungskraft &uuml;bersteigen. Aber wie nah ist diese Fiction wirklich an der Realit&auml;t?<\/p>\n<p>Tats&auml;chlich nutzen echte Cyberkriminelle oft heimliche und aggressive Methoden, um in Systeme einzudringen, Schlupfl&ouml;cher zu entdecken und wertvolle Informationen zu stehlen. Die Espionage-Taktiken, die in der Geschichte angedeutet werden, spiegeln die Strategien wider, die von echten Hackern verwendet werden, um so lange wie m&ouml;glich im Verborgenen zu bleiben und ihre Ziele effektiv zu kompromittieren.<\/p>\n<h3>Wissenswerte Fakten rund um IT-Security<\/h3>\n<p>Die Realit&auml;t zeigt: Die Bedrohungen durch Hacker, Staatsakteure und organisierte Hackergruppen sind greifbar und kontinuierlich wachsend. W&auml;hrend unser H&ouml;rspiel die Spannung und den Thrill solcher Szenarien einf&auml;ngt, ist es unabdingbar, sich mit den realen Fakten und Abwehrma&szlig;nahmen vertraut zu machen, um in unserer digital vernetzten Welt sicher zu bleiben.<\/p>\n<h3>Jetzt Podcast Folge h&ouml;ren!<\/h3>\n<p>Unsere Folge bietet nicht nur Bits und Bytes, sondern auch tiefe Einblicke in die aktuellen Bedrohungen durch Hackergruppen und die globalen Herausforderungen der Cybersecurity.<\/p>\n<p>Dein Feedback ist uns wichtig! Teile mit uns deine Gedanken und Interaktionen und erfahre, wie du dich vor den Bedrohungen des digitalen Zeitalters sch&uuml;tzen kannst.<\/p>\n<p>Jetzt verf&uuml;gbar bei iTunes, Spotify und &uuml;berall dort, wo du deine Podcasts h&ouml;rst!<\/p>\n<\/div>\n<a class=\"fusion-modal-text-link\" data-toggle=\"modal\" data-target=\".fusion-modal.Podcast Folge 11 - Die Dunkle Seite der Daten - Jenseits des Binaeren - Cybercrime Podcast Special IT Security bei Spotify\" href=\"#\"><iframe class=\"lazyload\" style=\"border-radius: 12px;\" src=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27100%27%20height%3D%27352%27%20viewBox%3D%270%200%20100%20352%27%3E%3Crect%20width%3D%27100%27%20height%3D%27352%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-orig-src=\"https:\/\/open.spotify.com\/embed\/episode\/2OxXGIOHYevPcdE1Gaeooc?utm_source=generator\" width=\"100%\" height=\"352\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/a>\n<\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-2 fusion-flex-container has-pattern-background has-mask-background nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\"><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1144px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-1 fusion_builder_column_1_1 1_1 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:100%;--awb-margin-top-large:0px;--awb-spacing-right-large:1.92%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:1.92%;--awb-width-medium:100%;--awb-order-medium:0;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-order-small:0;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-justify-content-flex-start fusion-content-layout-column\"><a class=\"fusion-modal-text-link\" data-toggle=\"modal\" data-target=\".fusion-modal.Rock the Prototype - Softwareentwicklung &amp; Prototyping Podcast iTunes\" href=\"#\"><iframe id=\"embedPlayer\" style=\"width: 100%; max-width: 990px; overflow: hidden; border-radius: 10px; transform: translateZ(0px); animation: 2s ease 0s 6 normal none running loading-indicator; background-color: #e4e4e4;\" src=\"https:\/\/embed.podcasts.apple.com\/de\/podcast\/rock-the-prototype-softwareentwicklung-prototyping\/id1684107786?itsct=podcast_box_player&amp;itscg=30200&amp;ls=1&amp;theme=dark\" height=\"450px\" frameborder=\"0\" sandbox=\"allow-forms allow-popups allow-same-origin allow-scripts allow-top-navigation-by-user-activation\"><\/iframe> <\/a><\/div><\/div><\/div><\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>Ransomware is therefore blackmail software, also known as an encryption Trojan. Ransomware is one of the most dangerous cyber attacks and is currently widespread. Ransomware is therefore blackmail software, also known as an encryption Trojan, which encrypts data or blocks access rights to directories, files and applications on attacked servers and computers. A ransom, typically in a cryptocurrency, is demanded for decryption. What is the most effective way to protect ourselves against ransomware attacks? Find out more now&#8230;<\/p>\n","protected":false},"author":1,"featured_media":4211,"template":"","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0},"categories":[1232],"tags":[2411,2408,2417,2412,2410,2416,2409,2415,2414,2413],"class_list":["post-4242","encyclopedia","type-encyclopedia","status-publish","has-post-thumbnail","hentry","category-it-security","tag-crypto-ransomware-en","tag-cybercrime-en-3","tag-early-detection-models","tag-encryption-trojans","tag-locker-ransomware-en","tag-machine-learning-based-detection-en","tag-malware-en","tag-notpetya-en","tag-petya-en","tag-wannacry-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Ransomware - Cybercrime attacks with devastating consequences<\/title>\n<meta name=\"description\" content=\"What is ransomware? \u2705 How blackmail software works \u2705 Types of encryption Trojans \u2705 Learn more about cyberattacks now...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware - Cybercrime attacks with devastating consequences\" \/>\n<meta property=\"og:description\" content=\"What is ransomware? \u2705 How blackmail software works \u2705 Types of encryption Trojans \u2705 Learn more about cyberattacks now...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/\" \/>\n<meta property=\"og:site_name\" content=\"Rock the Prototype - Softwareentwicklung &amp; Prototyping\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-22T07:27:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Angriffe-Pay-or-Loose.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1792\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"16 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/ransomware\\\/\",\"url\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/ransomware\\\/\",\"name\":\"Ransomware - Cybercrime attacks with devastating consequences\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/ransomware\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/ransomware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/rock-the-prototype.com\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/Ransomware-Angriffe-Pay-or-Loose.jpg\",\"datePublished\":\"2023-11-03T09:12:08+00:00\",\"dateModified\":\"2024-02-22T07:27:10+00:00\",\"description\":\"What is ransomware? \u2705 How blackmail software works \u2705 Types of encryption Trojans \u2705 Learn more about cyberattacks now...\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/ransomware\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/ransomware\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/ransomware\\\/#primaryimage\",\"url\":\"https:\\\/\\\/rock-the-prototype.com\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/Ransomware-Angriffe-Pay-or-Loose.jpg\",\"contentUrl\":\"https:\\\/\\\/rock-the-prototype.com\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/Ransomware-Angriffe-Pay-or-Loose.jpg\",\"width\":1792,\"height\":1024,\"caption\":\"Ransomware Angriffe - Pay or Loose\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/it-security\\\/ransomware\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/rock-the-prototype\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Prototyping Wiki\",\"item\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/wiki\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Ransomware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/\",\"name\":\"Rock the Prototype - Softwareentwicklung &amp; Prototyping\",\"description\":\"Prototyping: Software Prototypen, Software entwickeln &amp; Programmieren im Team\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/rock-the-prototype.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ransomware - Cybercrime attacks with devastating consequences","description":"What is ransomware? \u2705 How blackmail software works \u2705 Types of encryption Trojans \u2705 Learn more about cyberattacks now...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/","og_locale":"en_US","og_type":"article","og_title":"Ransomware - Cybercrime attacks with devastating consequences","og_description":"What is ransomware? \u2705 How blackmail software works \u2705 Types of encryption Trojans \u2705 Learn more about cyberattacks now...","og_url":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/","og_site_name":"Rock the Prototype - Softwareentwicklung &amp; Prototyping","article_modified_time":"2024-02-22T07:27:10+00:00","og_image":[{"width":1792,"height":1024,"url":"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Angriffe-Pay-or-Loose.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"16 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/","url":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/","name":"Ransomware - Cybercrime attacks with devastating consequences","isPartOf":{"@id":"https:\/\/rock-the-prototype.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#primaryimage"},"image":{"@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Angriffe-Pay-or-Loose.jpg","datePublished":"2023-11-03T09:12:08+00:00","dateModified":"2024-02-22T07:27:10+00:00","description":"What is ransomware? \u2705 How blackmail software works \u2705 Types of encryption Trojans \u2705 Learn more about cyberattacks now...","breadcrumb":{"@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#primaryimage","url":"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Angriffe-Pay-or-Loose.jpg","contentUrl":"https:\/\/rock-the-prototype.com\/wp-content\/uploads\/2023\/11\/Ransomware-Angriffe-Pay-or-Loose.jpg","width":1792,"height":1024,"caption":"Ransomware Angriffe - Pay or Loose"},{"@type":"BreadcrumbList","@id":"https:\/\/rock-the-prototype.com\/en\/it-security\/ransomware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/rock-the-prototype.com\/en\/rock-the-prototype\/"},{"@type":"ListItem","position":2,"name":"Prototyping Wiki","item":"https:\/\/rock-the-prototype.com\/en\/wiki\/"},{"@type":"ListItem","position":3,"name":"Ransomware"}]},{"@type":"WebSite","@id":"https:\/\/rock-the-prototype.com\/en\/#website","url":"https:\/\/rock-the-prototype.com\/en\/","name":"Rock the Prototype - Softwareentwicklung &amp; Prototyping","description":"Prototyping: Software Prototypen, Software entwickeln &amp; Programmieren im Team","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/rock-the-prototype.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/encyclopedia\/4242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/encyclopedia"}],"about":[{"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/types\/encyclopedia"}],"author":[{"embeddable":true,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/media\/4211"}],"wp:attachment":[{"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/media?parent=4242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/categories?post=4242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rock-the-prototype.com\/en\/wp-json\/wp\/v2\/tags?post=4242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}