New Castle News

Community News Network

October 10, 2012

Slate: Pay up or the hard drive gets it

You've just opened a Web page or clicked a link in an email when your computer's desktop goes gray. A browser window pops up with the FBI logo in the top left corner. Below it is a live webcam feed with a picture of someone's face. You try to click away but find that your browser is locked. With a start, you recognize the face staring at you from the screen: It's you.

This isn't the plot of a Japanese horror film. It's a frightening form of malware called "ransomware" that has been seen with increasing frequency in recent months. No one knows exactly how many people have been hit with it, but security firm McAfee reports that it recorded more than 120,000 new samples in the second quarter of 2012, a fourfold increase from the same quarter last year.

There are many variants of ransomware, all of which begin by locking you out of your own machine. The next phase: trying to blackmail, intimidate or otherwise spook you into forking over cash. You probably shouldn't do it. But it's easy to see why a lot of people do.

The version I described in the first paragraph is the product of a virus called Reveton, which you can contract either by clicking a malicious link or visiting an infected website, which triggers an automatic download. Beneath the video feed, which registers the surprise on your face as you recognize yourself, are your computer's IP address and hostname and an urgent message: "Your computer has been locked!" Scroll further and you'll find yourself accused of possessing illegally downloaded files in violation of federal copyright laws. (A new iteration claims that you're in violation of SOPA, the Stop Online Piracy Act - which, as serious netizens know, never actually became law.)

The crime, you're told, is punishable by a fine or up to three years in prison. There's only one way to unlock your computer, according to the warning on your browser, and that's to pay up. And if you don't pay the specified "fine" within 48 or 72 hours - often by purchasing a prepaid cash card such as Green Dot's Moneypak, which makes the transaction hard to trace - it claims that you'll be locked out of your machine permanently and face criminal charges to boot.

The criminal charges are bogus, of course, but the threat of being permanently locked out of your files is real, says Chet Wisniewski, senior security adviser at the data-security firm Sophos. Some victims have reported that, after a certain amount of time passed, their files were in fact deleted. On the other hand, it's unclear whether paying up actually helps, or if it just prompts the bad guys to try to squeeze more out of you. One thing security experts do know is that the scam appears to be automated. It would be a mistake to assume there's an actual human on the other end whom you can persuade to take it easy on you because you really, really need those files.

So what should you do if you're unwary and unlucky enough to contract a ransomware Trojan? First, instructs Sophos' Paul Ducklin in a helpful video, don't panic and don't do anything rash. Once the malware has control of your machine, chances are that most of the damage has already been done. In theory the hackers could mine your files for private information, but in practice they rarely do. Too much effort for an uncertain reward.

And ignore those threats not to tell anyone about the attack. Unless you're an expert yourself, it's a good idea to enlist the help of a computer security expert to help you figure out how to handle it. The FBI - the real FBI - also recommends filing a complaint at www.ic3.gov.

As with most forms of malware, the best protection here is simply to avoid visiting compromised websites or clicking on any suspicious-looking links, whether on the Web or in emails, Twitter or Facebook messages, or even Skype messages. Keeping your operating system and apps updated with the latest security patches always helps, and antivirus software can be an additional prophylactic. But this particular type of attack also reinforces the importance of backing up your files. Otherwise, you might never see them again.

It's conceivable, some security types admit privately, that paying up could prompt the criminals to restore them. But the official advice is that you never should, and in most cases that's the advice that makes the most sense.

 

1
Text Only | Photo Reprints
Community News Network
  • Victimized by the 'marriage penalty'

    In a few short months, I'll pass the milestone that every little girl dreams of: the day she swears - before family and God, in sickness and in health, all in the name of love - that she's willing to pay a much higher tax rate.

    April 15, 2014

  • Allergies are the real midlife crisis

    One of the biggest mysteries is why the disease comes and goes, and then comes and goes again. People tend to experience intense allergies between the ages of 5 and 16, then get a couple of decades off before the symptoms return in the 30s, only to diminish around retirement age.

    April 15, 2014

  • treadmill-very-fast.jpg Tax deduction for a gym membership?

    April marks another tax season when millions of Americans will deduct expenses related to home ownership, children and education from their annual tax bill. These deductions exist because of their perceived value to society; they encourage behaviors that keep the wheels of the economy turning. So why shouldn't the tax code be revised to reward preventive health?

    April 15, 2014 1 Photo

  • bomb1 VIDEO: A year after marathon bombing, Boston remains strong

    The City of Boston came together Tuesday to honor those who were injured and lost their lives at the Boston Marathon on the one-year anniversary of the bombing. While the day was sure to be emotional, those affected by last year's race are showing they won't let the tragedy keep them down.

    April 15, 2014 1 Photo

  • Google acquires drone maker Titan Aerospace to spread Internet

    Google is adding drones to its fleets of robots and driverless cars.
    The Internet search company said it acquired Titan Aerospace, the maker of high-altitude, solar-powered satellites that provides customer access to data services around the world. Terms of the deal weren't disclosed.

    April 14, 2014

  • E-Cigarettes target youth with festivals, lawmakers say

    The findings, in a survey released Monday by members of Congress, should prod U.S. regulators to curb the industry, the lawmakers said. While e-cigarettes currently are unregulated, the Food and Drug Administration is working on a plan that would extend its tobacco oversight to the products.

    April 14, 2014

  • Search teams will send unmanned sub to look for missing Malaysian airliner

    Teams searching for a missing Malaysian airliner are planning for the first time to send an unmanned submarine into the depths of the Indian Ocean to look for wreckage, an Australian official leading the multi-nation search said Monday.

    April 14, 2014

  • Why Facebook is getting into the banking game

    Who would want to use Facebook as a bank? That's the question that immediately arises from news that the social network intends to get into the electronic money business.

    April 14, 2014

  • Screen shot 2014-04-11 at 4.49.09 PM.png Train, entertain your pets with these 3 smartphone apps

    While they may not have thumbs to use the phone, pets can benefit from smartphone apps designed specifically for them.

    April 11, 2014 1 Photo

  • Stepping forward: The real Colbert

    Letterman changed the late-night TV game between his run on NBC's "Late Night" and starting the "Late Show" franchise in 1993. And while it's tough to replace a pop-culture icon, Colbert, in terms of pedigree and sense of humor, makes the most sense.

    April 11, 2014

House Ads
Poll

Beginning tonight, the Pittsburgh Penguins will take on the Columbus Blue Jackets in the first round of the NHL playoffs. So, who ya got? And in how many games?

Penguins, in five games or fewer. Too much firepower for the Blue Jackets, especially if Evgeni Malkin is ready to go.
Penguins, in six or seven games. It’s a pretty even matchup on defense, but Pittsburgh will grind it out.
Blue Jackets, in five games or fewer. Sergei Bobrovsky in goal for the Blue Jackets spells trouble for the Pens.
Blue Jackets, in six or seven games. Bobrovsky gives Columbus the edge, but it won’t be easy.
     View Results