Information Security Basics
Which statement correctly describes ransomware?
- ASoftware that displays large numbers of ads on the user's screen to earn advertising revenue
- BMalware that makes files on a computer unusable, for example by encrypting them without permission, and demands money (a ransom) in exchange for restoring them
- CAn attack that sends huge numbers of packets to make a server unable to respond
Show answer and explanation
Answer: B. Malware that makes files on a computer unusable, for example by encrypting them without permission, and demands money (a ransom) in exchange for restoring them
Ransomware is malware that makes files on infected computers or networks unusable, for example by encrypting them, and demands a ransom in exchange for the key to restore them. As of the mid-2020s, many reported cases involve intruding into an organization's network and encrypting many servers at once, or threatening to publish data stolen before the encryption (double extortion). Paying gives no guarantee of recovery and funds criminals, so not paying is recommended. The core defenses are applying fixes for vulnerabilities that attackers use to get in, multi-factor authentication for remote access, minimizing privileges, and backups kept somewhere disconnected from the network.
- A. Software that displays large numbers of ads is called adware.
- B. Correct. Making files unusable and demanding a ransom is what ransomware does.
- C. An attack that floods a server with packets so it cannot respond is a DoS (DDoS) attack.