Ransomware - Revision history

MMezgolits: /* Role of Cryptography in Ransomware */

2024-12-18T20:48:25Z

Role of Cryptography in Ransomware

← Older revision		Revision as of 20:48, 18 December 2024
Line 8:		Line 8:

	Malware / Ransomware use cryptography in order to hide its own code so that antivirus or security researchers cannot identify the actual code easily, communicate with its own command and control (C&C) Server and to encrypt the files on the victim machine.		Malware / Ransomware use cryptography in order to hide its own code so that antivirus or security researchers cannot identify the actual code easily, communicate with its own command and control (C&C) Server and to encrypt the files on the victim machine.

			[[File:hybrid-encryption.png\|300px\|thumb\|right\| Hybrid encryption scheme]]

	A cryptographic system can have the following components:		A cryptographic system can have the following components:
Line 19:		Line 21:
	** Asymmetric		** Asymmetric

	Advanced Encryption Standard (AES), the most used encryption algorithm in ~~ransomwares uses a~~ symmetric ~~key~~. More advanced CGRs use a combation of both Symmetric and Asymmetric Keys (CryptoLocker is known to use both a symmetric key and an asymmetric key RSA)		Advanced Encryption Standard (AES), the most used encryption algorithm in ransomwaress are symmetric keys. More advanced CGRs use a combation of both Symmetric and Asymmetric Keys (CryptoLocker is known to use both a symmetric key and an asymmetric key RSA).
			This method is known as hybrid encryption. The symmetric keys are used to encrypt the files. The symmetric key can be used to decrypt them, so an asymmetric key is used to encrypt the symmetric key. The private key of the attacker is needed to decrypt the symmetric key.

	[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric Encryption Scheme<ref name="KeyExchange"/>]]		[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric Encryption Scheme<ref name="KeyExchange"/>]]

MMezgolits: Moved fernet key based CGR to https://wiki.elvis.science/index.php?title=Python_based_Ransomware

2024-12-18T09:23:18Z

Moved fernet key based CGR to https://wiki.elvis.science/index.php?title=Python_based_Ransomware

Show changes

SKloss: /* Role of Cryptography in Ransomware */

2024-01-02T13:22:38Z

Role of Cryptography in Ransomware

← Older revision		Revision as of 13:22, 2 January 2024
Line 22:		Line 22:


	[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric Encryption <ref name="KeyExchange"/>]]		[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric Encryption Scheme<ref name="KeyExchange"/>]]

	== Cryptographic Ransomware (CGR) ==		== Cryptographic Ransomware (CGR) ==

SKloss: /* Role of Cryptography in Ransomware */

2024-01-02T13:22:05Z

Role of Cryptography in Ransomware

← Older revision		Revision as of 13:22, 2 January 2024
Line 22:		Line 22:


	[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric ~~Key Exchange~~ <ref name="KeyExchange"/>]]		[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric Encryption <ref name="KeyExchange"/>]]

	== Cryptographic Ransomware (CGR) ==		== Cryptographic Ransomware (CGR) ==

SKloss: /* References */

2024-01-02T13:19:21Z

References

← Older revision		Revision as of 13:19, 2 January 2024
Line 371:		Line 371:
	Pictures:		Pictures:
	<references>		<references>
	<ref name="KeyExchange"> prey project.com. 2021. [https://preyproject.com/blog/types-of-encryption-symmetric-or-asymmetric-rsa-or-aes].</ref>		<ref name="KeyExchange"> prey project.com. 2021. [https://preyproject.com/blog/types-of-encryption-symmetric-or-asymmetric-rsa-or-aes Types of Encryption: Symmetric or Asymmetric? RSA or AES?].</ref>
	<ref name="attackchain"> Exabeam. 2022. [https://www.exabeam.com/information-security/ransomwares-weakness-how-to-turn-ransomwares-achilles-heel-into-the-defenders-golden-hour/ Ransomware's Weakness: How to Turn Ransomware’s Achilles’ Heel Into the Defender’s Golden Hour].</ref>		<ref name="attackchain"> Exabeam. 2022. [https://www.exabeam.com/information-security/ransomwares-weakness-how-to-turn-ransomwares-achilles-heel-into-the-defenders-golden-hour/ Ransomware's Weakness: How to Turn Ransomware’s Achilles’ Heel Into the Defender’s Golden Hour].</ref>
	<ref name="ghidra"> Ghidra-sre.org. 2022. [https://ghidra-sre.org Ghidra].</ref>		<ref name="ghidra"> Ghidra-sre.org. 2022. [https://ghidra-sre.org Ghidra].</ref>
	</references>		</references>
	[[Category:Basic]]		[[Category:Basic]]

SKloss: /* Role of Cryptography in Ransomware */

2024-01-02T13:16:31Z

Role of Cryptography in Ransomware

← Older revision		Revision as of 13:16, 2 January 2024
Line 22:		Line 22:


	[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric Key Exchange <ref name=KeyExchange"/>]]		[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric Key Exchange <ref name="KeyExchange"/>]]

	== Cryptographic Ransomware (CGR) ==		== Cryptographic Ransomware (CGR) ==

SKloss: /* References */

2024-01-02T13:13:18Z

References

← Older revision		Revision as of 13:13, 2 January 2024
Line 371:		Line 371:
	Pictures:		Pictures:
	<references>		<references>
	<ref name="KeyExchange"> prey project.com. 2021. [https://preyproject.com/blog/types-of-encryption-symmetric-or-asymmetric-rsa-or-aes]</ref>		<ref name="KeyExchange"> prey project.com. 2021. [https://preyproject.com/blog/types-of-encryption-symmetric-or-asymmetric-rsa-or-aes].</ref>
	<ref name="attackchain"> Exabeam. 2022. [https://www.exabeam.com/information-security/ransomwares-weakness-how-to-turn-ransomwares-achilles-heel-into-the-defenders-golden-hour/ Ransomware's Weakness: How to Turn Ransomware’s Achilles’ Heel Into the Defender’s Golden Hour].</ref>		<ref name="attackchain"> Exabeam. 2022. [https://www.exabeam.com/information-security/ransomwares-weakness-how-to-turn-ransomwares-achilles-heel-into-the-defenders-golden-hour/ Ransomware's Weakness: How to Turn Ransomware’s Achilles’ Heel Into the Defender’s Golden Hour].</ref>
	<ref name="ghidra"> Ghidra-sre.org. 2022. [https://ghidra-sre.org Ghidra].</ref>		<ref name="ghidra"> Ghidra-sre.org. 2022. [https://ghidra-sre.org Ghidra].</ref>
	</references>		</references>
	[[Category:Basic]]		[[Category:Basic]]

SKloss: /* References */

2024-01-02T13:12:34Z

References

← Older revision		Revision as of 13:12, 2 January 2024
Line 371:		Line 371:
	Pictures:		Pictures:
	<references>		<references>
	<ref name="~~keyexchange~~"> prey project.com. 2021. [https://preyproject.com/blog/types-of-encryption-symmetric-or-asymmetric-rsa-or-aes]</ref>		<ref name="KeyExchange"> prey project.com. 2021. [https://preyproject.com/blog/types-of-encryption-symmetric-or-asymmetric-rsa-or-aes]</ref>
	<ref name="attackchain"> Exabeam. 2022. [https://www.exabeam.com/information-security/ransomwares-weakness-how-to-turn-ransomwares-achilles-heel-into-the-defenders-golden-hour/ Ransomware's Weakness: How to Turn Ransomware’s Achilles’ Heel Into the Defender’s Golden Hour].</ref>		<ref name="attackchain"> Exabeam. 2022. [https://www.exabeam.com/information-security/ransomwares-weakness-how-to-turn-ransomwares-achilles-heel-into-the-defenders-golden-hour/ Ransomware's Weakness: How to Turn Ransomware’s Achilles’ Heel Into the Defender’s Golden Hour].</ref>
	<ref name="ghidra"> Ghidra-sre.org. 2022. [https://ghidra-sre.org Ghidra].</ref>		<ref name="ghidra"> Ghidra-sre.org. 2022. [https://ghidra-sre.org Ghidra].</ref>
	</references>		</references>
	[[Category:Basic]]		[[Category:Basic]]

SKloss: /* Role of Cryptography in Ransomware */

2024-01-02T13:12:16Z

Role of Cryptography in Ransomware

← Older revision		Revision as of 13:12, 2 January 2024
Line 22:		Line 22:


	[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric Key Exchange <ref name=~~keyexchange~~"/>]]		[[File:Symmetric Encryption.jpeg\|300px\|thumb\|right\| Symmetric Key Exchange <ref name=KeyExchange"/>]]

	== Cryptographic Ransomware (CGR) ==		== Cryptographic Ransomware (CGR) ==

SKloss: /* References */

2024-01-02T13:11:26Z

References

← Older revision		Revision as of 13:11, 2 January 2024
Line 371:		Line 371:
	Pictures:		Pictures:
	<references>		<references>
	<ref name="keyexchange"> ~~O’Reilly Online Learning~~. ~~2022~~. [https://~~www.oreilly~~.com/~~library~~/~~view/preventing~~-~~ransomware/9781788620604/fcce9fbd~~-~~3757~~-~~4466~~-~~8036~~-~~ce7ea1a578e2.xhtml Preventing Ransomware~~]</ref>		<ref name="keyexchange"> prey project.com. 2021. [https://preyproject.com/blog/types-of-encryption-symmetric-or-asymmetric-rsa-or-aes]</ref>
	<ref name="attackchain"> Exabeam. 2022. [https://www.exabeam.com/information-security/ransomwares-weakness-how-to-turn-ransomwares-achilles-heel-into-the-defenders-golden-hour/ Ransomware's Weakness: How to Turn Ransomware’s Achilles’ Heel Into the Defender’s Golden Hour].</ref>		<ref name="attackchain"> Exabeam. 2022. [https://www.exabeam.com/information-security/ransomwares-weakness-how-to-turn-ransomwares-achilles-heel-into-the-defenders-golden-hour/ Ransomware's Weakness: How to Turn Ransomware’s Achilles’ Heel Into the Defender’s Golden Hour].</ref>
	<ref name="ghidra"> Ghidra-sre.org. 2022. [https://ghidra-sre.org Ghidra].</ref>		<ref name="ghidra"> Ghidra-sre.org. 2022. [https://ghidra-sre.org Ghidra].</ref>
	</references>		</references>
	[[Category:Basic]]		[[Category:Basic]]