Ransomwear: Pay up or the hard drive gets it

 

8206399

You've just opened a Web page or clicked a link in an email when your computer's desktop goes gray. A browser window pops up with the FBI logo in the top left corner. Below it is a live webcam feed with a picture of someone's face. You try to click away but find that your browser is locked. With a start, you recognize the face staring at you from the screen: It's you.

This isn't the plot of a Japanese horror film. It's a frightening form of malware called "ransomware" that has been seen with increasing frequency in recent months. No one knows exactly how many people have been hit with it, but security firm McAfee reports that it recorded more than 120,000 new samples in the second quarter of 2012, a fourfold increase from the same quarter last year.

There are many variants of ransomware, all of which begin by locking you out of your own machine. The next phase: trying to blackmail, intimidate or otherwise spook you into forking over cash. You probably shouldn't do it. But it's easy to see why a lot of people do.

The version I described in the first paragraph is the product of a virus called Reveton, which you can contract either by clicking a malicious link or visiting an infected website, which triggers an automatic download. Beneath the video feed, which registers the surprise on your face as you recognize yourself, are your computer's IP address and hostname and an urgent message: "Your computer has been locked!" Scroll further and you'll find yourself accused of possessing illegally downloaded files in violation of federal copyright laws. (A new iteration claims that you're in violation of SOPA, the Stop Online Piracy Act — which, as serious netizens know, never actually became law.)

The crime, you're told, is punishable by a fine or up to three years in prison. There's only one way to unlock your computer, according to the warning on your browser, and that's to pay up. And if you don't pay the specified "fine" within 48 or 72 hours — often by purchasing a prepaid cash card such as Green Dot's Moneypak, which makes the transaction hard to trace — it claims that you'll be locked out of your machine permanently and face criminal charges to boot.

The criminal charges are bogus, of course, but the threat of being permanently locked out of your files is real, says Chet Wisniewski, senior security adviser at the data-security firm Sophos. Some victims have reported that, after a certain amount of time passed, their files were in fact deleted. On the other hand, it's unclear whether paying up actually helps, or if it just prompts the bad guys to try to squeeze more out of you. One thing security experts do know is that the scam appears to be automated. It would be a mistake to assume there's an actual human on the other end whom you can persuade to take it easy on you because you really, really need those files.

So what should you do if you're unwary and unlucky enough to contract a ransomware Trojan? First, instructs Sophos' Paul Ducklin in a helpful video, don't panic and don't do anything rash. Once the malware has control of your machine, chances are that most of the damage has already been done. In theory the hackers could mine your files for private information, but in practice they rarely do. Too much effort for an uncertain reward.

And ignore those threats not to tell anyone about the attack. Unless you're an expert yourself, it's a good idea to enlist the help of a computer security expert to help you figure out how to handle it. The FBI — the real FBI — also recommends filing a complaint at www.ic3.gov.

As with most forms of malware, the best protection here is simply to avoid visiting compromised websites or clicking on any suspicious-looking links, whether on the Web or in emails, Twitter or Facebook messages, or even Skype messages. Keeping your operating system and apps updated with the latest security patches always helps, and antivirus software can be an additional prophylactic. But this particular type of attack also reinforces the importance of backing up your files. Otherwise, you might never see them again.

It's conceivable, some security types admit privately, that paying up could prompt the criminals to restore them. But the official advice is that you never should, and in most cases that's the advice that makes the most sense.

News
Alan Bennett has criticised the “repellent” reality shows which dominate our screens
tvBut he does like Stewart Lee
Life and Style
The Google Doodle celebrating the start of the first day of autumn, 2014.
tech
Arts and Entertainment
Sheridan Smith as Cilla Black and Ed Stoppard as her manager Brian Epstein
tvCilla Episode 2 review: Grit under the glamour in part two of biopic series starring Sheridan Smith
Sport
David Moyes and Louis van Gaal
football
PROMOTED VIDEO
Life and Style
ebooksA superb mix of recipes serving up the freshest of local produce in a delicious range of styles
Life and Style
ebooksFrom the lifespan of a slug to the distance to the Sun: answers to 500 questions from readers
News
i100
Life and Style
Vote with your wallet: the app can help shoppers feel more informed about items on sale
lifeNew app reveals political leanings of food companies
News
Former Governor of Alaska Sarah Palin, left, with her daughter, Bristol
newsShe's 'proud' of eldest daughter, who 'punched host in the face'
Sport
New Zealand fly-half Aaron Cruden pictured in The Zookeeper's Son on a late-night drinking session
rugby
Arts and Entertainment
Salmond told a Scottish television chat show in 2001that he would also sit in front of a mirror and say things like,
tvCelebrity Trekkies from Alex Salmond to Barack Obama
Life and Style
Carol O'Brien, whose son Rob suffered many years of depression
healthOne mother's story of how London charity Maytree helped her son with his depression
Arts and Entertainment
The cover of Dark Side of the Moon
musicCan 'The Endless River' carry on the tradition? See for yourself
Life and Style
food + drink
News
Rob Merrick's Lobby Journalists were playing Ed Balls' Labour Party MPs. The match is an annual event which takes place ahead of the opening of the party conference
newsRob Merrick insistes 'Ed will be hurting much more than me'
News
A cabin crew member photographed the devastation after one flight
news
Voices
A new app has been launched that enables people to have a cuddle from a stranger
voicesMaybe the new app will make it more normal to reach out to strangers
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Trainee / Experienced Recruitment Consultants

    £20000 - £25000 per annum + OTE £40,000: SThree: SThree are a global FTSE 250 ...

    Trainee Recruitment Consultant - Soho

    £20000 - £25000 per annum + OTE £40000: SThree: As a Recruitment Consultant, y...

    Trainee Recruitment Consultants - Banking & Finance

    £20000 - £25000 per annum + OTE £40,000: SThree: SThree Group have been well e...

    Website Editor

    £15 - £17 Per Hour: Clearwater People Solutions Ltd: Our client is currently r...

    Day In a Page

    Secret politics of the weekly shop

    The politics of the weekly shop

    New app reveals political leanings of food companies
    Beam me up, Scottie!

    Beam me up, Scottie!

    Celebrity Trekkies from Alex Salmond to Barack Obama
    Beware Wet Paint: The ICA's latest ambitious exhibition

    Beware Wet Paint

    The ICA's latest ambitious exhibition
    Pink Floyd have produced some of rock's greatest ever album covers

    Pink Floyd have produced some of rock's greatest ever album covers

    Can 'The Endless River' carry on the tradition?
    Sanctuary for the suicidal

    Sanctuary for the suicidal

    One mother's story of how London charity Maytree helped her son with his depression
    A roller-coaster tale from the 'voice of a generation'

    Not That Kind of Girl:

    A roller-coaster tale from 'voice of a generation' Lena Dunham
    London is not bedlam or a cradle of vice. In fact it, as much as anywhere, deserves independence

    London is not bedlam or a cradle of vice

    In fact it, as much as anywhere, deserves independence
    Vivienne Westwood 'didn’t want' relationship with Malcolm McLaren

    Vivienne Westwood 'didn’t want' relationship with McLaren

    Designer 'felt pressured' into going out with Sex Pistols manager
    Jourdan Dunn: Model mother

    Model mother

    Jordan Dunn became one of the best-paid models in the world
    Apple still coolest brand – despite U2 PR disaster

    Apple still the coolest brand

    Despite PR disaster of free U2 album
    Scottish referendum: The Yes vote was the love that dared speak its name, but it was not to be

    Despite the result, this is the end of the status quo

    Boyd Tonkin on the fall-out from the Scottish referendum
    Manolo Blahnik: The high priest of heels talks flats, Englishness, and why he loves Mary Beard

    Manolo Blahnik: Flats, Englishness, and Mary Beard

    The shoe designer who has been dubbed 'the patron saint of the stiletto'
    The Beatles biographer reveals exclusive original manuscripts of some of the best pop songs ever written

    Scrambled eggs and LSD

    Behind The Beatles' lyrics - thanks to Hunter Davis's original manuscript copies
    'Normcore' fashion: Blending in is the new standing out in latest catwalk non-trend

    'Normcore': Blending in is the new standing out

    Just when fashion was in grave danger of running out of trends, it only went and invented the non-trend. Rebecca Gonsalves investigates
    Dance’s new leading ladies fight back: How female vocalists are now writing their own hits

    New leading ladies of dance fight back

    How female vocalists are now writing their own hits