Ransomwear: Pay up or the hard drive gets it

 

8206399

You've just opened a Web page or clicked a link in an email when your computer's desktop goes gray. A browser window pops up with the FBI logo in the top left corner. Below it is a live webcam feed with a picture of someone's face. You try to click away but find that your browser is locked. With a start, you recognize the face staring at you from the screen: It's you.

This isn't the plot of a Japanese horror film. It's a frightening form of malware called "ransomware" that has been seen with increasing frequency in recent months. No one knows exactly how many people have been hit with it, but security firm McAfee reports that it recorded more than 120,000 new samples in the second quarter of 2012, a fourfold increase from the same quarter last year.

There are many variants of ransomware, all of which begin by locking you out of your own machine. The next phase: trying to blackmail, intimidate or otherwise spook you into forking over cash. You probably shouldn't do it. But it's easy to see why a lot of people do.

The version I described in the first paragraph is the product of a virus called Reveton, which you can contract either by clicking a malicious link or visiting an infected website, which triggers an automatic download. Beneath the video feed, which registers the surprise on your face as you recognize yourself, are your computer's IP address and hostname and an urgent message: "Your computer has been locked!" Scroll further and you'll find yourself accused of possessing illegally downloaded files in violation of federal copyright laws. (A new iteration claims that you're in violation of SOPA, the Stop Online Piracy Act — which, as serious netizens know, never actually became law.)

The crime, you're told, is punishable by a fine or up to three years in prison. There's only one way to unlock your computer, according to the warning on your browser, and that's to pay up. And if you don't pay the specified "fine" within 48 or 72 hours — often by purchasing a prepaid cash card such as Green Dot's Moneypak, which makes the transaction hard to trace — it claims that you'll be locked out of your machine permanently and face criminal charges to boot.

The criminal charges are bogus, of course, but the threat of being permanently locked out of your files is real, says Chet Wisniewski, senior security adviser at the data-security firm Sophos. Some victims have reported that, after a certain amount of time passed, their files were in fact deleted. On the other hand, it's unclear whether paying up actually helps, or if it just prompts the bad guys to try to squeeze more out of you. One thing security experts do know is that the scam appears to be automated. It would be a mistake to assume there's an actual human on the other end whom you can persuade to take it easy on you because you really, really need those files.

So what should you do if you're unwary and unlucky enough to contract a ransomware Trojan? First, instructs Sophos' Paul Ducklin in a helpful video, don't panic and don't do anything rash. Once the malware has control of your machine, chances are that most of the damage has already been done. In theory the hackers could mine your files for private information, but in practice they rarely do. Too much effort for an uncertain reward.

And ignore those threats not to tell anyone about the attack. Unless you're an expert yourself, it's a good idea to enlist the help of a computer security expert to help you figure out how to handle it. The FBI — the real FBI — also recommends filing a complaint at www.ic3.gov.

As with most forms of malware, the best protection here is simply to avoid visiting compromised websites or clicking on any suspicious-looking links, whether on the Web or in emails, Twitter or Facebook messages, or even Skype messages. Keeping your operating system and apps updated with the latest security patches always helps, and antivirus software can be an additional prophylactic. But this particular type of attack also reinforces the importance of backing up your files. Otherwise, you might never see them again.

It's conceivable, some security types admit privately, that paying up could prompt the criminals to restore them. But the official advice is that you never should, and in most cases that's the advice that makes the most sense.

Independent Comment
blog comments powered by Disqus
News in pictures
World news in pictures
Life & Style blogs

Million pound investment to bring Liverpool homes back into use

Dozens of empty homes in two of Liverpool’s most deprived areas will be brought back into use thanks...

Building blocks

A roundup of the latest property news

London renters are getting poorer and moving further out

Plus, do energy saving measures boost house prices?

       
Independent
Travel Shop
Lake Como and the Bernina Express
Seven nights half-board from £749pp Find out more
Dubrovnik and the Dalmatian coast
Seven nights half-board from only £859pp Find out more
Prague city break
Three nights from only £199pp Find out more
 

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Java Developer

    £200 - £250 per day: Progressive Recruitment: Java Developer - Urgent Requirem...

    SAP Consultant MM/WM

    £40000 - £47000 per annum + BENEFITS : Progressive Recruitment: Sap Consultant...

    SAP PP

    £45000 - £60000 per annum: Progressive Recruitment: SAP PP functional consulta...

    Change Manager,Hampshire,Telecomms,SC Clear,£200PD

    Negotiable: Orgtel: Change Manager, Hampshire, Telecomms, SC Cleared, £200 per...

    Day In a Page

    Babies behind bars: A Palestinian fertility doctor has become an unlikely hero by helping women conceive – even though their husbands are in jail

    Babies behind bars

    A Palestinian fertility doctor has become an unlikely hero by helping women conceive – even though their husbands are in jail
    Sonic youth: The high-pitched sound alarm for under 25s

    Sonic youth: The high-pitched sound alarm

    Is Mosquito, the alarm only under-25s can hear, a blessing or a bane?
    The art of living in small spaces: Architects are learning how to make less, more

    The art of living in small spaces

    Space in cities at a premium so architects are learning how to make less, more...
    Special report: The story of Sir Mervyn King's reign at the Bank

    The story of Sir Mervyn King's reign at the Bank

    After four 'nice' years as Governor of Bank of England, things turned decisively nasty
    Zombie nation: Our enduring fascination with a world full of death and destruction

    Zombie nation: Our fascination with death and destruction

    A new season of shows on Radio 4 is inspired by dark tales of future dystopias. Meanwhile, zombies are marauding in the multiplexes...
    Martin Stephen: 'Ofsted says comprehensives are failing the most able but teaching bright children isn't rocket science'

    'Teaching bright children isn't rocket science'

    It doesn't take a selective system to nurture the best minds, says a former head of St Paul's boys' school.
    The retail empires strike back: Can new technology lure us back to the high street?

    Can technology lure us back to the high street?

    The high street has been bruised and battered by online firms but in-store technology is helping to enliven the retail experience...
    The 10 Best new smartphones

    The 10 Best new smartphones

    Photos, films, music, apps and browsing - the latest mobiles can do it all
    Jenson Button: Downbeat driver cannot wait to put season behind him

    Jenson Button: Downbeat driver cannot wait to put season behind him

    McLaren man admits 'failed gamble' with car has left him pinning hopes on 2014 campaign
    James Lawton: Firmer fist will be required to win Champions Trophy final battle with stouter foe

    James Lawton

    Firmer fist will be required to win Champions Trophy final battle with stouter foe
    'To farm I have to rape the countryside. It’s got to be wrong': The true effect of the badger cull

    The true effect of the badger cull

    'To farm I have to rape the countryside. It’s got to be wrong'
    Theatre review: Daniel Radcliffe gives an admirably honest performance in Michael Grandage's The Cripple of Inishmaan

    First night: The Cripple of Inishmaan

    Daniel Radcliffe gives an admirably honest performance in Michael Grandage's comedy
    Girls Guides drop religious reference but pledge to self and the Queen

    Guides drop religious reference but pledge to self and the Queen

    After 103 years, organisation changes oath to welcome 'all girls, of all faiths, and none'
    Steve Tongue: Joe Kinnear was one of the boys and a breath of fresh air... 21 years ago

    Steve Tongue

    Joe Kinnear was one of the boys and a breath of fresh air... 21 years ago
    Chris Froome: Free from 'pain in neck' after Bradley Wiggins' exit

    Chris Froome: Free from 'pain in neck' after Wiggins' exit

    Sky's lead rider says he is in fantastic form for the Tour and happy pecking order debate is over