CryptoLocker, a new ransomware malware, began making the rounds several months ago. This ransomware is particularly nasty because infected users are in danger of losing their personal files forever.
Ransomware is designed to extort money from computer users by holding computer files hostage until the computer user pays a ransom fee to get them back. The Cryptolocker hijacker sniffs out your personal files and wraps them with strong encryption before it demands money.
Cryptolocker is spread through malicious hyperlinks shared via social media and spam emails, like fake UPS tracking notification emails. The original demanded payments of $100 to decrypt files, but the new and improved version demanding $300 from victims.
Apparently, the encryption is created using a unique RSA-2048 public key. The decryption key is located on a secret server somewhere on the Internet and then there is a countdown on the infected machine which will let you know how long you have until this key will no longer be available.
Ransomware is not a new threat, but in the last year, it has become more effective and more popular with criminals. Researchers from a number of antivirus vendors are working on a way to undo the damage, but it's not going to be easy.
To prevent Ransomware from infecting your computer, please ensure that your computer has a properly configured firewall, updating each computer on a regular basis with the latest patches and updates from their vendor such as Microsoft, and restricting access solely to the administrator or person who operates the network or computer. If you're unsure then please contact Central IT for further advise.
