sman Posted February 10, 2016 ID:1018460 Share Posted February 10, 2016 Oh.. How ingenious can cybercrime go to, in http://www.darkreading.com/endpoint/10-shocking-new-facts-about-ransomware/d/d-id/1324217?image_number=1 .. 7 of 11 Crooks Can Buy It In A SaaS ModelNot only is ransomware extortion lucrative, but it doesn't take much of an initial investment to get into, either. In fact, last year saw a new innovation within the cybercriminal black market as ransomware-as-a-service gave criminals the option to pick up the technology for free so long as they gave developers a cut of their earnings. Think of it as a modified freemium pay model, if you will. Link to post Share on other sites More sharing options...
gonzo Posted February 10, 2016 ID:1018468 Share Posted February 10, 2016 And guess what happens if you don't pay your bill..... Link to post Share on other sites More sharing options...
sman Posted February 10, 2016 Author ID:1018479 Share Posted February 10, 2016 It is 'unthinkable', what with organized crime, high stakes in play, even probably involving syndicates, sends shivers down.. Link to post Share on other sites More sharing options...
Aura Posted February 10, 2016 ID:1018491 Share Posted February 10, 2016 There's only one or two things that I consider "new" about Ransomware in this article, the rest have been known for a while, even since the beginning with CryptoLocker. Link to post Share on other sites More sharing options...
sman Posted February 10, 2016 Author ID:1018494 Share Posted February 10, 2016 I feel the article gives a good insight/understanding of the involved players, threat impact for one to take proper counter measures.. Link to post Share on other sites More sharing options...
David H. Lipman Posted February 10, 2016 ID:1018510 Share Posted February 10, 2016 ... even since the beginning with CryptoLocker. Older than that. Cryptovirology was first seen in the predictive encryption of GPcode circa 2005. What made encryption easier to implement was the Microsoft Crypto API. What brought FIPS-140-2 compliance also brought us cryptovirology using Public Key Enablement ( PKE ). Now modern crypto trojans are using Public Key Infrastructure ( PKI ). Cryptovirology was first postulated and described in an IEEE paper published circa 1996.Cryptovirology: extortion-based security threats and countermeasures Link to post Share on other sites More sharing options...
sman Posted February 10, 2016 Author ID:1018598 Share Posted February 10, 2016 BTW can't the 'Beneficiary' - the perpetrator be zeroed in., tracing the money route?? Link to post Share on other sites More sharing options...
Aura Posted February 10, 2016 ID:1018600 Share Posted February 10, 2016 Thanks for the explanation David This is why a lot of Ransomware asks to the ransom to be paid in BTC (Bitcoin) now, because even though you can identify the wallet, you cannot identify who owns it, nor who access it. Bitcoin transactions are anonymous, so really hard to trace back. Link to post Share on other sites More sharing options...
David H. Lipman Posted February 10, 2016 ID:1018603 Share Posted February 10, 2016 BitCoin, .ONION, Tor and the Dark Net obfuscate and shield the malicious actors. References:The Darknet Isn’t Just for Dark DealsRansomware goes to Tor: potential successor to Cryptolocker appearsYay for Tor! It's given us RANSOMWARE-as-a-serviceransomware - Tor Misused by Criminals Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now