Cryptolocker is a new sophisticated malware that was launched in the late 2013. It is designed to attack Windows operating systems by encrypting all the files from the system using a RSA-2048 public key.
Cryptolocker is true to its name. It uses strong cryptography to lock all files that a user has permission to modify, including those on secondary hard drives and network storage systems.
Due to the strength of the encryption key used your files will never be able to be decrypted. Even if you have the knowledge and computer power to brute force the key, it would take thousands of years to crack. So essentially your data is lost and useless.
What to do if you think you are infected
- If infected with Cryptolocker Do Not Pay the ransom. There is no guarantee you will be given the Private Key to decrypt your data. Plus you are also funding the Cyber Criminals for their next attack.
- Cryptolocker Requires a reboot to take control of the machine. So If you suspect you are infected with Cryptolocker DONT REBOOT. Get professional advice.
- Make sure your Anti-Virus / Malware Software is up to date.
- Backup Your Data regularly.
- If you have encrypted of your own data this will not prevent it being encrypted again. Cryptolocker will just encrypt your encrypted data.
- Most attacks are being done through emails. Usually trying to fool you it’s from a Parcel Delivery Firm. Ask yourself, How & Why would this Parcel Delivery Firm have your email address?
- Be wary of email attachments. If in doubt delete.
- Emails without attachments do not click on the links provided. If you need to be certain go direct to the website by typing into the web browser.
- Finally If in doubt do not Click “Just Delete”
The post What is Cryptolocker Virus? appeared first on APH.
