{"id":6317,"date":"2017-10-29T21:17:46","date_gmt":"2017-10-29T21:17:46","guid":{"rendered":"https:\/\/www.n-able.com\/?p=6317"},"modified":"2021-07-13T10:40:07","modified_gmt":"2021-07-13T09:40:07","slug":"where-did-my-server-go-ransomware","status":"publish","type":"post","link":"https:\/\/www.n-able.com\/fr\/blog\/where-did-my-server-go-ransomware","title":{"rendered":"\u00ab\u00a0Where did my server go?\u00a0\u00bb: How to defend against ransomware"},"content":{"rendered":"

You get calls from your customers coming to you every day with all kinds of problems. But there\u2019s one call you definitely don\u2019t want to get. It\u2019s the one where they tell you they can\u2019t access their workstation or server and have a screen saying their files have been encrypted, they need to pay money to an online account, and the encryption key will be destroyed in a matter of hours from now.<\/p>\n

That\u2019s right \u2013 your customer has been hit with ransomware.<\/p>\n

\"Cyber-Crime\"If you\u2019re unfamiliar with it, ransomware is malware with a different intent. Rather than taking the traditional focus of trying to steal information or capture keystrokes (to obtain credentials), ransomware focuses on being far more in your face by flat out telling you it\u2019s there and you need to pay to get rid of it.<\/p>\n

One of the worst (or best, if you can appreciate the innovation of it all) is Crypt0L0cker, which uses state-of-the-art public\/private key encryption to encrypt files with very specific extensions (the ones you care about \u2013 docx, xlsx, etc\u2026). It\u2019s a very advanced form of ransomware.<\/p>\n

As if that\u2019s not bad enough, it\u2019s not just the ransomware you need to be worried about.\u00a0 Recent efforts have shown ransomware that acts like a sophisticated APT, automatically creating new payload variants with each attack, to avoid detection.<\/p>\n

There are a few types of ransomware running amok today, each with a different level of nastiness.<\/p>\n