Security Warning: Antivirus Firm Thirtyseven4 Alerts Ransomware Infections Increasing.

Definition: Ransomware is a form of malware developed to encrypt (prohibit access to) files on a computer with the sole intent of extorting money from its victims (paying a ransom to recover encrypted files).

Thirtyseven4 Endpoint Security, a leading provider of Windows, Mac and Android Solutions

The payment is usually requested in the form of direct credit card payments or via Bitcoins (online payment currency).

Generally speaking there are two main classifications for ransomware, Encryptor (encrypts all important files and demands a ransom to decrypt files) and Screen Locker (locks an infected system, preventing proper access until a ransom is paid). Most of the latest strains intercepted by the Thirtyseven4 lab fall under the Encryptor classification. The top ransomware threats include, Cryptorbit, Cryptolocker, CryptoWall, PornoBlocker, ZedoPoo.

Ransomware is spread using social engineering tricks via social networking sites and email attachments. It is very similar to the infamous FBI Moneypak virus. Spammed email messages are the major contributor in ransomware propagation.

Ransomware targets file types that are most valuable to the user: documents, images, photos, etc. While the file extensions ransomware targets can vary per variation, the general list of targeted file extensions for encryption include:

*.odt, *.ods, *.odp, *.odm, *.odc, *.odb, *.doc, *.docx, *.docm, *.wps, *.xls, *.xlsx, *.xlsm, *.xlsb, *.xlk, *.ppt, *.pptx, *.pptm, *.mdb, *.accdb, *.pst, *.dwg, *.dxf, *.dxg, *.wpd, *.rtf, *.wb2, *.pdf, *.mdf, *.dbf, *.psd, *.pdd, *.eps, *.ai, *.indd, *.cdr, *.jpg, *.jpe, img_*.jpg, *.dng, *.3fr, *.arw, *.srf, *.sr2, *.bay, *.crw, *.cr2, *.dcr, *.kdc, *.erf, *.mef, *.mrw, *.nef, *.nrw, *.orf, *.raf, *.raw, *.rwl, *.rw2, *.r3d, *.ptx, *.pef, *.srw, *.x3f, *.der, *.cer, *.crt, *.pem, *.pfx, *.p12, *.p7b, *.p7c

The following graphics show the events when trying to access an encrypted file:

Ransomware Detections Increasing

Malware writing is big business for cybercriminals, and ransomware creators are fully aware that millions of dollars were extorted in 2014 from helpless victims through this style of malware.

Below are real world ransomware statistics, based on actual intercepted and prevented infections for Thirtyseven4 Endpoint Security users over the last few months

“Ransomware Detections” reflects the total number of ransomware detections for the month. In other words, Thirtyseven4 proactively prevented 136,990 infections in January 2015.

“Cryptolocker.Susp Email attachments” is the number of malicious emails stopped by the Thirtyseven4 module Email Security though which ransomware infections propagate.

The remaining entries reflect the virus signature associated with the top four ransomware family detections for the month.