ITPEC IP October 2022 Question 42

Encrypts files, makes them unusable and demands money for the decryption key — ransomware holds the victim's data hostage for a ransom.

Ransomware typically arrives through an e-mail attachment, a malicious website or an unpatched vulnerability. It encrypts documents and other files, then displays a demand for payment, often in cryptocurrency, to release the key. Paying does not guarantee that the files are recovered.

Answer (a)

Why not others:

• •(b) — illegally recording keyboard input describes a keylogger, used to steal passwords and other input
• •(c) — altering the system log to avoid being found is typical of a rootkit, a set of tools that hides an intruder and keeps administrator access
• •(d) — spreading by itself over networks, without needing a host file, describes a worm

Key rule: The main defence against ransomware is regular backups kept apart from the computer, since it can also encrypt any drive that stays connected.

Security · AI-written, may contain errors