Alessandro SIqueira {Oforense}

Cibersegurança | Computação Forense | Hacking

O que é um Ransoware?

por · Publicadas · Atualizada

Ransomware é um tipo de software malicioso (categoria de malware) que criptografa os dados armazenados em um equipamento, tornando eles inacessíveis aos usuários.

“Geralmente ele exige o pagamento de resgate (ransom) para devolver ou restabelecer o acesso ao dados dos usuários”.

Malware são códigos maliciosos especificamente desenvolvidos para executar usado para causar prejuízo, que pode ser até financeiro, interceptar dados, comprometer sistemas afetando computadores, dispositivos móveis e até redes inteiras.

O ransomware é projetado para criptografar os arquivos do usuário de forma que eles se tornem inacessíveis, e os criminosos por trás do ataque exigem o pagamento de um valor em dinheiro, geralmente em criptomoedas, para fornecer a chave de descriptografia e permitir que o usuário recupere seus arquivos.

Os ransomwares podem infectar os sistemas de várias maneiras, incluindo:

  • E-mails de phishing: Os criminosos enviam e-mails fraudulentos que parecem legítimos, geralmente com anexos maliciosos ou links para sites comprometidos. Quando o usuário abre o anexo ou clica no link, o ransomware é baixado e executado em seu sistema.

  • Exploits de software: Os ransomwares podem se aproveitar de vulnerabilidades em softwares desatualizados para infiltrar-se nos sistemas. Uma vez que o ransomware ganha acesso, ele começa a criptografar os arquivos.

  • Downloads de sites não confiáveis: Ao fazer o download de arquivos de fontes não confiáveis ou de sites comprometidos, é possível que o usuário acabe baixando um arquivo que contém ransomware.

Quando um sistema é infectado com ransomware, o usuário geralmente recebe uma mensagem de resgate na qual os criminosos exigem o pagamento em troca da chave de descriptografia. Essas mensagens muitas vezes contêm instruções detalhadas sobre como realizar o pagamento, geralmente usando criptomoedas para dificultar o rastreamento.

É importante destacar que pagar o resgate não garante a recuperação dos arquivos, pois os criminosos podem não cumprir suas promessas ou podem retornar com novas exigências de pagamento. Além disso, o pagamento incentiva o crescimento desse tipo de atividade criminosa.

A melhor maneira de se proteger contra ransomware é tomar medidas preventivas, como manter o sistema e o software atualizados, fazer backups regulares de dados importantes e evitar abrir anexos ou clicar em links suspeitos em e-mails ou sites desconhecidos. O uso de software antivírus e firewalls também pode ajudar a identificar e bloquear a entrada de ransomware nos sistemas.

Lista de Extensões de arquivos utilizados por Ransowares (Atualizado 2023)

#ExtensãoFile type description
1_AiraCropEncryptedAiraCrop Ransomware affecte file
21cbu1Princess Locker ransomware affected file
31txtEnigma ransomware affected file
473i87AXorist Ransomware affected data
5a5zfnAlma Locker ransomware affected data
6aaaTeslaCrypt ransomware encrypted data
7abcTeslaCrypt ransomware encrypted data
8adkAngry Duck ransomware affected file
9aesirLocky ransomware affected file
10alcatrazAlcatraz Locker ransomware affected file
11angelamerkelAngela Merkel ransomware affected file
12AngleWareHiddenTear/MafiaWare (variant) ransomware affected file
13antihacker2017Xorist (variant) Ransomware affected file
14atlasAtlas ransomware affected file
15axxAxCrypt encrypted data
16BarRaxBarRax (HiddenTear variant) ransomware affected file
17binAlpha/Alfa ransomware affected data
18bitstakBitstak ransomware affected data
19braincryptBraincrypt ransomware affected file
20breaking_badFiles1147@gmail(.)com ransomware affected data
21briptBadEncriptor ransomware affected file
22btcJigsaw Ransomware affected data
23cccTeslaCrypt or Cryptowall encrypted data
24CCCRRRPPPUnlock92 ransomware affected data
25cerberCerber ransomware affected data
26cerber2Cerber 2 ransomware affected file
27cerber3Cerber 3 ransomware affected data
28codedAnubis ransomware affected file
29comradeComrade ransomware affected file
30confickerConficker ransomware affected file
31covertonCoverton ransomware affected data
32covid-19Phishing / ransomware file
33covid19Phishing / ransomware file
34crabGandCrab ransomware affected data
35crinfDecryptorMax or CryptInfinite ransomware affected data
36crjokerCryptoJoker ransomware affected data
37crptrgrCryptoRoger ransomware affected data
38cryCryLocker ransomware affected data
39cryeyeDoubleLocker ransomware affected data
40cryp1CryptXXX ransomware affected data
41cryptScatter ransomware affected data
42crypteJigsaw (variant) ransomware affected file
43cryptedNemucod ransomware affected file
44cryptolockerCryptoLocker encrypted file
45cryptowallEncrypted file by Cryptowall ransomware
46crypzCryptXXX ransomware affected data
47czvxceCoverton ransomware affected file
48d4nkPyL33T ransomware affected file
49daleChip ransomware affected file
50damageDamage ransomware affected file
51darknessRakhni ransomware affected data
52dCryptDummyLocker ransomware affected file
53deadboltDeadbolt ransomware affected file
54decrypt2017Globe 3 ransomware affected file
55derpDerp ransomware renamed file
56DexterTroldesh (variant) ransomware affected file
57dharmaCrySiS ransomware affected file
58dllFSociety ransomware affected file
59dxxdDXXD ransomware affected file
60eccCryptolocker or TeslaCrypt virus encrypted file
61edgelEdgeLocker ransomware affected file
62encTorrentLocker ransomware affected file
63encCryptorium ransomware affected file
64encipheredMalware (ransomware) encoded data
65EnCiPhErEdXorist Ransomware affected data
66encrFileLocker ransomware affected file
67encryptAlpha ransomware affected data
68encryptedVarious ransomware affected file
69encryptedDonald Trump ransomware affected file
70encryptedKeRanger OS X ransomware affected file
71enigmaCoverton ransomware affected data
72evillockEvil-JS (variant) ransomware affected file
73exoticExotic ransomware affected file
74exxAlpha Crypt encrypted data
75ezzAlpha Crypt virus encrypted data
76fantomFantom ransomware affected data
77file0lockedEvil ransomware affected file
78fuckedManifestus ransomware affected file
79funJigsaw Ransomware affected data
80funJigsaw (variant) ransomware affected file
81geficktJigsaw (variant) ransomware affected file
82globeGlobe ransomware affected file
83goodScatter ransomware affected data
84grtKarmen HiddenTear (variant) ransomware affected file
85ha3El-Polocker affected file
86helpmeencedfilesSamas/SamSam ransomware affected file
87herbstHerbst ransomware affacted data
88hnumkhotepGlobe 3 ransomware affected file
89hushJigsaw ransomware affected file
90ifuckedyouSerbRansom ransomware affected file
91infoPizzaCrypts Ransomware affected data
92kernel_completeKeRanger OS X ransomware data
93kernel_pidKeRanger OS X ransomware data
94kernel_timeKeRanger OS X ransomware
95keybtc@inbox_comKeyBTC ransomware affected data
96kimcilwareKimcilWare ransomware affected data
97kkkJigsaw Ransomware affected data
98kostyaKostya ransomware affected file
99krabGandCrab v4 ransomware affected data
100krakenRakhni ransomware affected file
101kratosKratosCrypt ransomware affected data
102kyraGlobe ransomware affected file
103lckedJigsaw (variant) ransomware affected file
104LeChiffreLeChiffre ransomware affected data
105legionLegion ransomware affected data
106lesliCryptoMix ransomware affected file
107lock93Lock93 ransomware affected file
108lockedVarious ransomware affected data
109locklockLockLock ransomware affected data
110lockyLocky ransomware affected data
111lol!GPCode ransomware affected data
112loliLOLI RanSomeWare ransomware affected file
113lovewindowsGlobe (variant) ransomware affected file
114madebyadamRoga ransomware affected file
115magicMagic ransomware affected data
116mayaHiddenTear (variant) ransomware affected file
117MERRYMerry X-Mas ransomware affected file
118microTeslaCrypt 3.0 ransomware encrypted data
119moleCryptoMix (variant) ransomware affected data
120mp3TeslaCrypt 3.0 ransomware encrypted data
121MRCR1Merry X-Mas ransomware affected file
122noproblemwedecfiles​Samas/SamSam ransomware affected file
123nuclear55Nuke ransomware affected file
124odcodcODCODC ransomware affected file
125odinLocky ransomware affected file
126onionDharma ransomware affected data
127oopsMarlboro ransomware affected file
128osirisLocky (variant) ransomware affected data
129p5tkjwXorist Ransomware affected data
130padcryptPadCrypt ransomware affected data
131paymJigsaw Ransomware affected data
132paymrssJigsaw Ransomware affected file
133paymsJigsaw Ransomware affected file
134paymstJigsaw Ransomware affected file
135paymtsJigsaw Ransomware affected file
136payrmsJigsaw Ransomware affected file
137paysJigsaw Ransomware affected data
138pdcrPadCrypt Ransomware script
139pecPEC 2017 ransomware affected file
140PEGS1Merry X-Mas ransomware affected file
141perlBart ransomware affected file
142PoAr2wXorist Ransomware affected file
143potatoPotato ransomware affected file
144powerfulldecryptSamas/SamSam ransomware affected file
145pubgPUBG ransomware affected data
146purgeGlobe ransomware affected file
147pzdcScatter ransomware affected data
148R16m01d05Ransomware affected data
149r5a7ev3n ransomware affected file
150raid10Globe [variant] ransomware affected file
151RARE1Merry X-Mas ransomware affected file
152razyRazy ransomware affected data
153rdmRadamant ransomware affected file
154realfs0ciety@sigaint.org.fs0cietyFsociety ransomware affected file
155recoSTOP/DJVU ransomware file
156rektHiddenTear (variant) ransomware affected file
157rektRektLocker ransomware affected data
158remkSTOP Ransomware variant
159ripKillLocker ransomware affected file
160RMCM1Merry X-Mas ransomware affected file
161rmdZeta ransomware affected file
162rnsmwrGremit ransomware affected file
163rokkuRokku ransomware affected data
164rrkRadamant v2 ransomware affected file
165rubyRuby ransomware affected file
166sageSage ransomware affected data
167SecureCryptedApocalypse ransomware affected file
168serpSerpent (variant) ransomware affected file
169serpentSerpent ransomware affected file
170sexyPayDay ransomware affected files
171shitLocky ransomware affected file
172sporaSpora ransomware affected file
173stnSatan ransomware affected file
174surpriseSurprise ransomware affected data
175szfSZFLocker ransomware affected data
176theworldisyoursSamas/SamSam ransomware affected file
177thorLocky ransomware affected file
178tttTeslaCrypt 3.0 ransomware encrypted data
179unavailableAl-Namrood ransomware affected file
180vbransomVBRansom 7 ransomware affected file
181venusfVenus Locker ransomware affected file
182VforVendettaSamsam (variant) ransomware affected file
183vindowsVindows Locker ransomware affected file
184vvvTeslaCrypt 3.0 ransomware encrypted data
185vxlockvxLock ransomware affected file
186walletGlobe 3 (variant) ransomware affected file
187wcryWannaCry ransomware affected file
188wflxWildFire ransomware affected file
189WhereisyourfilesSamas/SamSam ransomware affected file
190windows10Shade ransomware affected data
191wncryWana Decrypt0r 2.0 ransomware affected data
192xxxTeslaCrypt 3.0 ransomware encrypted file
193xxxhelp_dcfile ransomware affected file
194xyzTeslaCrypt ransomware encrypted data
195ytblTroldesh (variant) ransomware affected file
196zcryptZCRYPT ransomware affected data
197zeptoLocky ransomware affected data
198zorroZorro ransomware affected file
199zyklonZYKLON ransomware affected data
200zzzTeslaCrypt ransomware encrypted data
201zzzzzLocky ransomware affected file

Tags:

Deixe um comentário

O seu endereço de e-mail não será publicado. Campos obrigatórios são marcados com *