A estratégia de engenharia social e o sequestro dos dados por ransomware

Abstract

The article presented a study on the reasons favorable to the attacker succeed in the process of infection ransomware. the lifting of social engineering strategies in the psychological aspect, heuristics and cognitive biases of the human element was held. threat classification, forms of delivery, cryptographic device used, method of payment, and understanding of attack taxonomy. Basic research, descriptive, had the foundation the security incident in the company of the education sector, name not cited for ethical reasons, which was observed data encryption. In the analysis of Petya and Cerber malware virtualized environment, there were persuasive techniques in the email body. Obtained successful decryption of data by using third-party tools. However there is no real guarantee for new versions of ransomware. Proceed with training, data backup routine, and safe navigation, are good practices in mitigating the risks.