For this test, the TEMASOFT Research Lab Team let loose one of the latest Locky variants, which features many improvements regarding speed, obfuscation, and strength of the cryptography. The malware uses multiple processes to ensure coverage for as many files as possible and usually gets delivered as part of SPAM campaigns containing malicious attachments that execute as macros and install the ransomware payload. The encrypted files receive the .osiris extension, and a ransom note is shown as soon as the process is complete. However, there are reports that many Locky variants to not restore files once ransom has been paid, so going ahead with payment is unadvisable and will most probably not solve the problem.
TEMASOFT Ranstop detects and stops this variant in around 2 seconds, time in which the ransomware managed to encrypt over 200 files on the local hard drive. CryptoLocker, for example, only encrypted several tens of files in triple the time.
At this rate, an entire system may be compromised between 10 minutes and half an hour.
As soon as the malware is detected and stopped, the executables are being quarantined, and an incident is logged into the TEMASOFT Ranstop Console. At the same time, the files damaged by “.Osiris” Locky are automatically restored at their original location and can be observed alongside the encrypted copies, bearing the .osiris mark.
TEMASOFT Ranstop handled this fast Locky variant very well by stopping it in a matter of seconds, restoring damaged files automatically and preserving the system integrity.
Click here to watch TEMASOFT Ranstop in action (video)!
About TEMASOFT Ranstop
TEMASOFT Ranstop is an anti-ransomware software that detects present and future ransomware, based on file access pattern analysis with a high degree of accuracy. At the same time, it protects user files so that they can be restored in case of malware attacks or accidental loss.
For more information, follow us on social media and subscribe to our newsletter.
This post was last modified on August 21, 2023 7:27 am
In the digital world, information is often stored and transferred through files. From the most…
Introduction Data security is more important than ever in today's fast-paced digital world. One critical…
Introduction: Cyber threats are a growing concern for businesses and individuals alike. With the increasing…
Microsoft Internet Information Services (IIS) is a popular web server that is widely used to…
File tracking is an important aspect of server administration, and it can help administrators detect…
File monitoring solutions are essential tools for administrators to manage and protect their organizations' data…