Follow Shaun Linkedin Facebook
Email Shaun Email
Technology
Jan 1, 2016

Ransom Price Rises: CryptoWall 4.0

Sponsored Content provided by Shaun Olsen - Founder, CloudWyze

In an article a few months ago, we told you about the price being paid by businesses hit with the new ransomware Trojan virus called CryptoLocker. It’s devastating in that it encrypts your files and forces you to pay heavily to get them returned, unencrypted.

Now, a clone has arisen in its most disturbing version yet: CryptoWall 4.0.

This version started appearing extensively in November, with a redesigned ransom note and new filenames. Taking the pain further, it now encrypts a file's name along with its data. 

The folks at Bleepingcomputer.com posted about their members being infected by what was being called the help_your_files ransomware, but it turned out to be this new version of CryptoWall.

You know you’ve been infected when you open certain files and the correct program is opened but the information isn’t displayed properly. An error message also may pop up when opening infected files, or you may find three files appearing at the root of directories containing CryptoWall-encrypted files:

  • DECRYPT_INSTRUCTION.txt
  • DECRYPT_INSTRUCTION.html
  • DECRYPT_INSTRUCTION.url
Clicking on any CryptoWall-infected file will lead you to instructions for making ransom payment. This is when you need to decide: make the payment, or attempt to reconstruct your system. Typically, the ransom amount begins at $500, and the countdown timer notes the three days in which you must make payment to the requestor – and then the fee doubles. But paying the ransom is a significant effort, requiring payment in Bitcoin.  

Note that CryptoWall, like CryptoLocker, is reasonably easy to remove with the right tools, but the files held for ransom remain encrypted after the program’s removal. According to TechRepublic, some victims claimed that paying the ransom did not always lead to the files being decrypted.

What should you do to avoid this hijacking?
  1. Back Up. The only way to be sure that your files can be restored without paying the fee is to have a clean backup. If you have any questions about what to do to be sure your backup is working and that you’re optimizing the automation, give us a call and we’ll help. But don’t simply restore a good backup onto an infected machine. This is complex stuff. Call in the surgeon before trying to cut off your own leg.
     
  2. Don’t Open Spam. Look, we know the temptation of a face cream that makes you look 20 years younger, but don’t click on that ad. If you don’t know the person sending the email, don’t open it. If a friend sends you a social media post that in any way seems odd, just ignore it. CryptoWall threats typically arrive through spam emails, malicious ads or compromised sites. Get serious about how you and your employees use the Internet – and don’t get lured in.
Viruses are so pervasive that you’re bound to be infected at some point. We suggest that you take this seriously, and get as much armor between you and the culprits as possible. This Trojan will not be the last.

Shaun Olsen is the CEO and president of CloudWyze. CloudWyze was created to help businesses focus and perform at their optimal level by crafting and executing custom technology plans for businesses of every type and size. To learn more about CloudWyze, visit www.CloudWyze.com. Shaun can be reached at [email protected] or (910) 795-1000.

Other Posts from Shaun Olsen

Cloudwyze web ad 4131595451
Ico insights

INSIGHTS

SPONSORS' CONTENT
Drewsmith copiersplus headshot

Ditch The Fax Line - Gain The Benefits

Drew Smith - Copiers Plus
Carolinemontgomery4

Don't Procrastinate - How Waiting To File Your Taxes Can Hurt You

Caroline Montgomery - Adam Shay CPA, PLLC
Mike stonestreet 300x300

How To Handle Increasing Member Assessments

Mike Stonestreet - CAMS (Community Association Management Services)

Trending News

Intracoastal Buys Bald Head Island Ltd.’s Housing Sales Business

Cece Nunn - Feb 18, 2020

Earth Fare Shares Layoff Numbers, Additional Closure Details

Cece Nunn - Feb 17, 2020

For Hospital, Another Pedestrian Bridge, Parking Deck Planned

Cece Nunn - Feb 19, 2020

Rounds Golf & Lounge Brings Ledo Pizza To Wilmington

Jessica Maurer - Feb 19, 2020

Quality Chemical To Grow Sister Company In Wilmington

Christina Haley O'Neal - Feb 19, 2020

In The Current Issue

Apple Trip Highlights Education, Tech

While very much a local issue, what to do with New Hanover Regional Medical Center is gaining attention from the state level....


Distillery Aims For Spirited Success

The 4,800-square-foot distillery with full cocktail bar, lounge, tasting room and event space is housed in a WWII-era Quonset hut....


Propelling ILM's Future

In the decades since, ILM’s route map has opened up as passenger levels increased and additional airlines came, but airport officials say th...

Book On Business

The 2020 WilmingtonBiz: Book on Business is an annual publication showcasing the Wilmington region as a center of business.

Order Your Copy Today!


Galleries

Videos

2019 Health Care Heroes
August 26, 2019 Power Breakfast: A Healthy Sale?
2019 WILMA Leadership Accelerator
2019 WilmingtonBiz Expo Keynote Lunch - CEO, nCino, Pierre Naude`