How the ransomware economy rips you off, part 3
Ransomware uses affiliate network, just like TV networks do.
Ever wonder why ransomware has become so widespread these days? An infection in England shut down hospitals. Staff told patients that if they did not have an emergency, go home. The computers were not working.
That is because the money is easy. Ransomware publishers created an affiliate network to spread their poison. At https://www.elie.net/blog/security/exposing-the-inner-workings-of-the-ransomware-economy, Elie Bursztein tells us enterprising scammers can join a network, spread the ransomware and earn commissions.
Elie Bursztein’s slideshow is at https://www.elie.net/talk/tracking-desktop-ransomware-payments-end-to-end. Ransomware becomes serious because most people do not back up data. When it encrypts and renders their files unavailable, victims have no choice but to pay the fee.
Keeping this in mind, let’s see how not backing up your data works against you.
What happened.
Dick runs a medical billing office in Sacramento. He runs the business without any computer network consultants. He installs Microsoft’s free updates. He avoids buying virus protection or content filtering firewalls. “Unnecessary expense,” he says. I’m running a business here.
One day, he saw a popup.
The Wanacry ransomware found his computer and encrypted all his files. He could not open any documents, his practice management system or his financial package.
He was out of business.
What he did.
Dick opened a bitcoin account, bought $300 worth of bitcoin and sent them to an anonymous bitcoin address. Those credits actually transfer through several bitcoin accounts before getting “redeemed” by the mastermind. Dick luckily received a decryption key with instructions to decrypt his files.
The takeaway.
Dick is back in business. He told his neighbor what happened. The neighbor told Dick he brought it upon himself by maintaining weak security. It was inevitable that a company with security as weak as Dick’s would get hit. Do not be a dick. Make sure you have active and current virus protection. Make sure you have a firewall with a content filtering subscription. Make sure your users know how to vet a link before clicking. See http://cameronparkcomputer.com/secure/ for a free quiz and training. Be careful. TV shows are not the only thing promoted through affiliate networks.