Ransomwear: Pay up or the hard drive gets it

 

8206399

You've just opened a Web page or clicked a link in an email when your computer's desktop goes gray. A browser window pops up with the FBI logo in the top left corner. Below it is a live webcam feed with a picture of someone's face. You try to click away but find that your browser is locked. With a start, you recognize the face staring at you from the screen: It's you.

This isn't the plot of a Japanese horror film. It's a frightening form of malware called "ransomware" that has been seen with increasing frequency in recent months. No one knows exactly how many people have been hit with it, but security firm McAfee reports that it recorded more than 120,000 new samples in the second quarter of 2012, a fourfold increase from the same quarter last year.

There are many variants of ransomware, all of which begin by locking you out of your own machine. The next phase: trying to blackmail, intimidate or otherwise spook you into forking over cash. You probably shouldn't do it. But it's easy to see why a lot of people do.

The version I described in the first paragraph is the product of a virus called Reveton, which you can contract either by clicking a malicious link or visiting an infected website, which triggers an automatic download. Beneath the video feed, which registers the surprise on your face as you recognize yourself, are your computer's IP address and hostname and an urgent message: "Your computer has been locked!" Scroll further and you'll find yourself accused of possessing illegally downloaded files in violation of federal copyright laws. (A new iteration claims that you're in violation of SOPA, the Stop Online Piracy Act — which, as serious netizens know, never actually became law.)

The crime, you're told, is punishable by a fine or up to three years in prison. There's only one way to unlock your computer, according to the warning on your browser, and that's to pay up. And if you don't pay the specified "fine" within 48 or 72 hours — often by purchasing a prepaid cash card such as Green Dot's Moneypak, which makes the transaction hard to trace — it claims that you'll be locked out of your machine permanently and face criminal charges to boot.

The criminal charges are bogus, of course, but the threat of being permanently locked out of your files is real, says Chet Wisniewski, senior security adviser at the data-security firm Sophos. Some victims have reported that, after a certain amount of time passed, their files were in fact deleted. On the other hand, it's unclear whether paying up actually helps, or if it just prompts the bad guys to try to squeeze more out of you. One thing security experts do know is that the scam appears to be automated. It would be a mistake to assume there's an actual human on the other end whom you can persuade to take it easy on you because you really, really need those files.

So what should you do if you're unwary and unlucky enough to contract a ransomware Trojan? First, instructs Sophos' Paul Ducklin in a helpful video, don't panic and don't do anything rash. Once the malware has control of your machine, chances are that most of the damage has already been done. In theory the hackers could mine your files for private information, but in practice they rarely do. Too much effort for an uncertain reward.

And ignore those threats not to tell anyone about the attack. Unless you're an expert yourself, it's a good idea to enlist the help of a computer security expert to help you figure out how to handle it. The FBI — the real FBI — also recommends filing a complaint at www.ic3.gov.

As with most forms of malware, the best protection here is simply to avoid visiting compromised websites or clicking on any suspicious-looking links, whether on the Web or in emails, Twitter or Facebook messages, or even Skype messages. Keeping your operating system and apps updated with the latest security patches always helps, and antivirus software can be an additional prophylactic. But this particular type of attack also reinforces the importance of backing up your files. Otherwise, you might never see them again.

It's conceivable, some security types admit privately, that paying up could prompt the criminals to restore them. But the official advice is that you never should, and in most cases that's the advice that makes the most sense.

Sport
Australia vs New Zealand live
cricket Follow over-by-over coverage as rivals New Zealand and Australia face off
News
Zayn has become the first member to leave One Direction. 'I have to do what feels right in my heart,' he said
peopleWe wince at anguish of fans, but his 1D departure shows the perils of fame in the social media age
Life and Style
Researchers found that just 10 one-minute swill-and-spit sessions are enough to soften tooth enamel and make teeth vulnerable to erosion
health
News
i100
Life and Style
ebookNow available in paperback
ebooks
ebookPart of The Independent’s new eBook series The Great Composers
Arts and Entertainment
The Regent Street Cinema’s projection room in the 1920s
film
News
Leah Devine is only the ninth female to have made the Young Magician of the Year final since the contest began more than 50 years
peopleMeet the 16-year-old who has set her heart on being the first female to win Young Magician of the Year
News
Jonathan Anderson was born in Northern Ireland but now based between London, where he presents a line named JW Anderson
peopleBritish designer Jonathan Anderson is putting his stamp on venerable house Loewe
News
Andy Davidhazy at the beginning (left) and end (right) of his hike
video
News
Taylor Swift is applying to trademark song lyrics from 1989
people
Voices
The popularity of TV shows such as The Liver Birds encouraged Liverpudlians to exaggerate their Scouse accent
voicesWe exaggerate regional traits and turn them into jokes - and those on the receiving end are in on it too, says DJ Taylor
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Recruitment Genius: Junior Web Designer - Client Liaison

    £6 per hour: Recruitment Genius: This is an exciting opportunity to join a gro...

    Recruitment Genius: Service Delivery Manager

    Negotiable: Recruitment Genius: A Service Delivery Manager is required to join...

    Recruitment Genius: IT Infrastructure Engineer

    £30000 - £40000 per annum: Recruitment Genius: Our client is looking to find a...

    Recruitment Genius: IT Engineer

    £21000 - £23600 per annum: Recruitment Genius: An exciting opportunity to join...

    Day In a Page

    Election 2015: How many of the Government's coalition agreement promises have been kept?

    Promises, promises

    But how many coalition agreement pledges have been kept?
    The Gaza fisherman who built his own reef - and was shot dead there by an Israeli gunboat

    The death of a Gaza fisherman

    He built his own reef, and was fatally shot there by an Israeli gunboat
    Saudi Arabia's airstrikes in Yemen are fuelling the Gulf's fire

    Saudi airstrikes are fuelling the Gulf's fire

    Arab intervention in Yemen risks entrenching Sunni-Shia divide and handing a victory to Isis, says Patrick Cockburn
    Zayn Malik's departure from One Direction shows the perils of fame in the age of social media

    The only direction Zayn could go

    We wince at the anguish of One Direction's fans, but Malik's departure shows the perils of fame in the age of social media
    Young Magician of the Year 2015: Meet the schoolgirl from Newcastle who has her heart set on being the competition's first female winner

    Spells like teen spirit

    A 16-year-old from Newcastle has set her heart on being the first female to win Young Magician of the Year. Jonathan Owen meets her
    Jonathan Anderson: If fashion is a cycle, this young man knows just how to ride it

    If fashion is a cycle, this young man knows just how to ride it

    British designer Jonathan Anderson is putting his stamp on venerable house Loewe
    Number plates scheme could provide a licence to offend in the land of the free

    Licence to offend in the land of the free

    Cash-strapped states have hit on a way of making money out of drivers that may be in collision with the First Amendment, says Rupert Cornwell
    From farm to fork: Meet the Cornish fishermen, vegetable-growers and butchers causing a stir in London's top restaurants

    From farm to fork in Cornwall

    One man is bringing together Cornwall's most accomplished growers, fishermen and butchers with London's best chefs to put the finest, freshest produce on the plates of some of the country’s best restaurants
    Robert Parker interview: The world's top wine critic on tasting 10,000 bottles a year, absurd drinking notes and New World wannabes

    Robert Parker interview

    The world's top wine critic on tasting 10,000 bottles a year, absurd drinking notes and New World wannabes
    Don't believe the stereotype - or should you?

    Don't believe the stereotype - or should you?

    We exaggerate regional traits and turn them into jokes - and those on the receiving end are in on it too, says DJ Taylor
    How to make your own Easter egg: Willie Harcourt-Cooze shares his chocolate recipes

    How to make your own Easter egg

    Willie Harcourt-Cooze talks about his love affair with 'cacao' - and creates an Easter egg especially for The Independent on Sunday
    Bill Granger recipes: Our chef declares barbecue season open with his twist on a tradtional Easter Sunday lamb lunch

    Bill Granger's twist on Easter Sunday lunch

    Next weekend, our chef plans to return to his Aussie roots by firing up the barbecue
    Joe Marler: 'It's the way I think the game should be played'

    Joe Marler: 'It's the way I think the game should be played'

    The England prop relives the highs and lows of last Saturday's remarkable afternoon of Six Nations rugby
    Cricket World Cup 2015: Has the success of the tournament spelt the end for Test matches?

    Cricket World Cup 2015

    Has the success of the tournament spelt the end for Test matches?
    The Last Word: Justin Gatlin knows the price of everything, the value of nothing

    Michael Calvin's Last Word

    Justin Gatlin knows the price of everything, the value of nothing