Ransomware

21st-Century Extortion

There are two basic types of ransomware: crypto ransomware, the most common, aims to encrypt data and files; locker ransomware locks a computer, preventing victims from using it at all. For both types of ransomware, the strategy is to deny access to something you want or need, only offering to return what is rightfully yours when a ransom is paid.

 

In 2015, crypto ransomware grew by 35 percent, pushing the less damaging locker style out of the picture.

Growing Dominance of Crypto Ransomware

Percentage of new families of misleading apps, fake security software (Fake AV), locker ransomware and crypto ransomware identified between 2005 and 2015.

Crypto Ransomware Over Time

Crypto ransomware’s growth continues, as the traditional locker style rapidly declines. By employing strong, ostensibly unbreakable key-based cryptography to hold a victim’s personal files ransom, crypto ransomware encrypts files with a key that only criminals can access.

Crypto Ransomware as Percentage of All Ransomware

Within just one year, crypto ransomware skyrocketed from less than 10 percent of attacks to accounting for the majority of all ransomware tactics.


Starting with 1,000 attacks per day in 2015, crypto ransomware, which deletes all of the victim’s files if a ransom isn’t paid, now occurs between two and 3,000 times a day.

An extremely profitable type of attack, ransomware continues to ensnare PC users, encrypting files stored on network and cloud servers and holding them hostage for profit. These attacks have also moved to mobile devices, encrypting anything the owner will pay to recover.

“Internet Security Threat Report,” 2016, Symantec Corporation.