NCERT Ransomeware and malware attacks.pdf
- 1. MALWARE AND RANSOMWARE ATTACKS AARUSHI CHOPRA ASSOCIATE AT SETH ASSOCIATES
- 2. STATISTICS โขA ransomware attack occurs every 2 secs. โขEvery day 1.7 million, and every second 19 ransomware attacks occur. โขThe average cost of a ransomware attack was $1.85 million in 2022. โขThe first half of 2022 saw nearly 236.7 million ransomware attacks worldwide. โขThere is 51% increase in ransomware incidents reported in 2022 compared to 2021.
- 4. โข Malware is one of the most common cyber threats. โข It is an umbrella term for any type of malicious software designed to steal data and or destroy data on a computer or network. . โข It is used to represent a variety of cyber threats like spyware, ransomware, viruses, bots, trojans, and worms. โข It is commonly introduced via email attachments, downloads or network vulnerabilities. What is a malware?
- 5. Main aspects of a malware attack โขObjective: What the malware is designed to achieve. โขDelivery: How the malware is delivered to the target. โขConcealment: How the malware avoids detection.
- 6. โข Stealing data, credentials, payment information, etc. โข Destroys computer systems. Here the level of destruction can vary depending on the intention of the attacker. โข Locking up networks and PCs, making them unusable to further extort money from the target either by scareware or ransomware. โข Uses your computing power to send spam emails. Common Objectives
- 7. TYPES OF MALWARE ATTACKS Virus Worm Trojan Hybrid malware Adware Malvertising Spyware Ransomware Fileless malware Scareware Rootkit Bot Keyloggers Backdoors RAT Downloaders POS
- 8. โข Adware: It shows ads and popups that link to unsafe sites. It redirects users to similar lookalike sites promoting advertised products that can be potentially malicious. https://www.techtarget.com/searchsecurity/definition/adware
- 9. โข Spyware: It monitors usersโ online activities and browsing habits without their consent, to collect financial details and login credentials. https://www.techtarget.com/searchsecurity/answer/The-effects-of-spyware
- 10. โข Viruses: They can delete important files or corrupt data by shutting down the device in the middle of use. https://cyware.com/news/luzerne-county-in-pennsylvania-hit-with-virus-attack-09a9058b
- 11. โข Trojans: They are hidden in online games or software and take control of the device. It is used to install further malware, delete or steal important data, monitor online activities, or modify files. https://in.pinterest.com/pin/671740100657212227/
- 12. Worms: They are a self-replicating type of malware that can spread to other computers. Worms can spread through โ โขcomputer networks, โขe-mails, โขinstant-messaging services, โขsocial networks, โขremovable media and โขother channels. https://twitter.com/gosafeonline/status/997673392823140352
- 13. โข Scareware: Cybercriminals scare us into thinking that our computers or smartphones have become infected to convince victims to purchase a fake application. https://www.wallarm.com/what/what-is-scareware-malware-removal-and-protection
- 14. โข In April 2022, Oil India was hit by a malware attack in its field headquarters in eastern Assam's Duliajan, wherein the hacker demanding $75,00,000. โข After receipt of the report of malware threat, precautionary measures were taken by the company. โข Network management service providers and the Anti-Virus Team were immediately informed & the incident was also reported to the Indian Computer Emergency Response Team (CERT-In). โข The company did not attempt to establish any contacts with the miscreants. Recent Cases
- 16. โข Cybercriminals utilize ransomware as a sort of malware. โข When ransomware infects a computer or network, it either (i) locks the system's screen or (ii) locks the users' files. โข In exchange for releasing the data, cybercriminals seek ransom money from their victims. โข The Remote Desktop Protocol, phishing emails, and software flaws are commonly used as attack vectors. What is a ransomware attack?
- 17. LOCKER RANSOMWARE This malware prevents basic computer processes from functioning. For example, you may be denied access to the desktop, while the mouse and keyboard are partially disabled. This permits you to continue interacting with the ransom demand window in order to make the payment. Aside from that, the PC is unusable. CRYPTO RANSOMWARE Here the goal is to encrypt your vital data, such as documents, photos, and videos, while not interfering with basic computer functionality. Crypto developers frequently include a countdown to their ransom demand. The encrypted files ensures that victims are forced to pay the ransom even if the malware itself was deleted. TYPES OF RANSOMEWARE ATTACKS
- 20. โข Recently, the All India Institute of Medical Sciences (AIIMS), the country's foremost healthcare institution, reported a large cyber hacking as the result of a ransomware attack. โข The cyber-attack caused a server outage, which disrupted daily hospital operations like appointments, patient registration, discharge, and more. Recent Cases
- 21. How to Mitigate an Active Ransomware Infection
- 22. 1. Quarantine the Machine: You must isolate systems so that they cannot affect the rest of the environment. 2. Leave the Computer On: Encryption of files may make a computer unstable and powering off a computer can result in loss of memory. Keep the computer on to maximize the probability of recovery. 3. Create a Backup: Decryption of files is sometimes possible without paying the ransom. Make a copy of encrypted files on a removable media in case a solution becomes available in the future.
- 23. 4. Check for Decryptors: Check if a free decryptor is available. If so, run it on a copy of the encrypted data to see if it can restore the files. 5. Ask For Help: A digital forensics expert may be able to recover the backup copies stored on a computer if they havnโt been deleted by the malware. 6. Wipe and Restore: Restore the machine from a clean backup. This ensures that the malware is completely removed from the device.
- 24. CYBER SAFETY FOR PARENTS & CHILDREN
- 25. โข Donโt download any unknown software/App. โข Donโt open unknown attachments or links in suspicious emails. โข Donโt provide personal information to anyone through the internet. โข Learn how to identify potential malware (i.e. phishing emails, unknown applications running on a system). โข If a child uses email, talk to them to ensure they know their peers and teachersโ email addresses. โข Keep their social media accounts set to private and explore other settings that can keep them safe. DOโs DONTโs
- 26. โข Periodic, unannounced exercises, such as intentional phishing campaigns. โข Equip the computers with a good anti-virus software. โข Use multi-factor authentication to protect your accounts. โข Always keep the systems updated. โข Employ strong & complex passwords. โข Change your passwords regularly and never save passwords electronically. โข Back up important files using the 3-2-1 rule: Create three backup copies on two different media with one backup in a separate location. BEST PRACTICES
- 28. Check Grammatical and Spelling Errors https://www.capnet.co.uk/news/spot-a-phishing-scam-email
- 31. โข This notification is for all service provider, intermediary, data centre, body corporate and Government organisation. โข They must mandatorily report cyber incidents to CERT-In within 6 hours of noticing such incidents. โข The incidents can be reported to CERT-In via email (incident@cert-in.org.in), Phone (1800-11-4949) and Fax (1800-11-6969). Notification No. 20(3)/2022-CERT-In, Dated: 28 April, 2022 CERT-In 6 Hours Reporting Timeline
- 32. โข https://cybercrime.gov.in/ is the main cybercrime reporting portal in India. The offence is punishable under Section 66 of IT Act, 2000 with three years of imprisonment , fine or both. โข When you are hit by a malware or a ransomware attack, you can report the same on the portal under different heads such as โData theftโ, โRansomwareโ, โVirus, Worms & Trojansโ, or โDenial of Services/Distributed DOSโ. Cybercrime Reporting Portal
- 33. โข The singular objective of this platform is to prevent the defrauded money from exiting the financial ecosystem and ending up in the hands of the fraudsters. โข You must report the financial fraud within 24 hours of occurrence. โข This platform has been made operational by the Indian Cyber Coordination Centre (14C). โข It has the active support and cooperation of Reserve Bank of India(RBI), all major banks, payment gateways and online merchants. 1930 Financial Fraud Helpline No.
- 34. Thank You