Ransomware Attacks: Tools and Techniques for Detection
Khowla Khaliq, Nor Zairah Ab. Rahim, Khalid Hamid, Muhammad Ibrar, Uzair Ahmad, Muhammad Ubaid Ullah · 2024
Ransomware is a sort of crypto virology virus that attempts to expose or persistently limit access to the accused's private information until a ransom payment is made. Although some ransomware might simply lock the machine without affecting any files, more complex viruses use a tactic known as crypto viral blackmail. It encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them. It encrypts the user's data, rendering them unreadable, and then asks for a ransom from the person to decode them. This paper discusses the characteristics of ransomware, the functionality of ransomware, and the variants of ransomware. Lastly, a framework is proposed to detect the ransomware using the “Kaspersky” anti-malware tools and a virtual machine to prevent ransomware attacks.