Ghidra Software Reverse-Engineering for Beginners - Second Edition

18

Reverse-Engineering Ransomware

Ransomware is a type of malicious software (malware) that tries to block access to a user’s data by encrypting it. It can sometimes try to lock the victim out of their system entirely. Victims are only able to re-access their system and data after the ransom is paid. The concept of ransomware dates back to the late 1980s with the AIDS Trojan, which encrypted filenames and demanded payment for decryption. However, it has evolved significantly since then. Modern ransomware employs advanced encryption techniques and spreads through sophisticated methods, such as phishing emails, exploit kits, and malvertising. It has become increasingly popular due to the rise of cryptocurrencies, which facilitate anonymous ransom ...