Vertical Markets

Ransomware not slowing

by Mark Rowe

Ransomware shows no sign of slowing, with the volume of mobile ransomware rising over three-fold (3.5 times) during the first few months of the year, according to an IT security company. According to Kaspersky Lab’s Malware Report, the number of mobile ransomware files detected reached 218,625 during the first quarter of 2017, compared to 61,832 in the previous quarter, with the Congur family accounting for more than 86 per cent. Ransomware targeting all devices, systems and networks also continued to grow, with 11 new cryptor families and 55,679 new modifications making their appearance in that quarter.

Congur ransomware is primarily a blocker – setting or resetting the device PIN (passcode) so the requires the attackers to have administrator rights on the device, and some variants of the malware take further advantage of these rights to install their module into the system folder from where it is almost impossible to remove.

Despite the popularity of Congur, Trojan-Ransom.AndroidOS.Fusob.h remained the most widely used mobile ransomware, accounting for nearly 45 per cent of all users attacked by this threat during the quester. Once run, the Trojan requests administrator privileges, collects information about the device, including GPS coordinates and call history, and uploads the data to a malicious server. Based on what it receives, the server may send back a command to block the device. The USA became the country hardest hit by mobile ransomware, with Svpeng ransomware the most widespread threat.

Roman Unuchek, Senior Malware Analyst at Kaspersky Lab, says: “The mobile threat landscape for ransomware was far from calm in Q1. Ransomware targeting mobile devices soared, with new ransomware families and modifications continuing to proliferate. People need to bear in mind that attackers can – and increasingly will – try to block access to their data not only on a PC but also on their mobile device.”

Attempted infections by malware that aims to steal money via online access to bank accounts were registered on 288,000 user computers; and crypto-ransomware attacks were blocked on 240,799 computers of unique users.

Related News

Newsletter

Subscribe to our weekly newsletter to stay on top of security news and events.

© 2024 Professional Security Magazine. All rights reserved.

Website by MSEC Marketing