Abstract:

As more individuals use virtual currencies like Bitcoin, Ethereum, Ripple, and Litecoin, the latter have also found their way to becoming a prime tool for cyber-criminals, in terms of platforms to be used for their illicit activities. A very dangerous crypto-ransomware is a particular method of approach, whereby, after penetration, it encrypts the victim's files and offers to decrypt those files if some virtual currency was paid for its services. If the victim refuses to comply, the attacker threatens to permanently block access to the encrypted files.The growing popularity of crypto-ransomware makes it one of the most important cybersecurity threats today. Although many studies have addressed the detection and analysis of these attacks, ours focuses on a specific case of crypto-ransomware offering a detailed forensic analysis of a recent attack. In our study, we closely examined the methods and behaviors of the ransomware and traced information that could lead to identifying the attacker.We look to use this study to offer new insights into crypto-ransomware mechanisms in hopes of aiding those efforts in more clearly understanding and counteracting the development of this continuously changing threat.

Description:

.