The Functionality of Encrypting Viruses

Cybercriminals use encrypted ransomware that has become the most common type because it is difficult to crack the encryption and remove the malware.

Ensar Seker
Lotus Fruit
Published in
4 min readAug 5, 2020

--

Cybercriminals use encrypted ransomware that has become the most common type because it is difficult to crack the encryption and remove the malware. All the stuff you keep on your PC is encrypted by malicious code for ransom. Most Ransomware these days use AES — RSA encryption methods that are incredibly difficult to crack.

Ransomware virus encrypts the files as if they were actively encrypted, but actually, they are hidden in a separate file, which waits for a defined set of conditions to be unlocked before they are decrypted. In the case of ransomware, the viruses can encrypt files without the knowledge or consent of the user. The encryption key is generated offline and embedded in the malware before it is sent out to attack you, or it is embedded in malware sent during an attack.

Once your files are encrypted, the virus will create a tutorial on how to obtain the decryption key that is available to you if you pay the ransom. You will be shown a link to download the required decoder.

--

--

Ensar Seker
Lotus Fruit

Cybersecurity | Artificial Intelligence | Blockchain