2016-2018勒索软件.和恶意矿工的威胁景观（英文版）.pdfVIP

KSN Report: Ransomware and malicious cryptominers 2016-2018 Contents KSN Report: 1 Ransomware and malicious cryptominers 2016-2018 1 Executive summary and main findings 3 Introduction: A disappearing species - a brief look at ransomware decline over a year 5 Game changer – how cryptocurrency miners beat them all 18 Part 1. PC miners 18 Part 2. Mobile miners 24 Part 3. Between black and white: are risk tools replacing malware? 29 Conclusions and predictions 33 Fighting back 34 2 Executive summary and main findings Ransomware is not an unfamiliar threat. For the last few years it has been affecting the world of cybersecurity, infecting and blocking access to various devices or files and requiring users to pay a ransom (usually in Bitcoins or another widely used e-currency), if they want to regain access to their files and devices. The term ransomware covers two main types of malware: so-called window blockers (which block the OS or browser with a pop-up window) and cryptors (which encrypt the user’s data). The term also encompasses select groups of Trojan-downloaders, namely those that tend to download encryption ransomware once a PC is infected. Kaspersky Lab has a tradition of reporting on the evolution of ransomware – and you can find previous reports on the threat here and here. This year, however, we came across a huge obstacle in continuing this tradition. We have found that ransomware is rapidly vanishing, and that cryptocurrency mining is starting to take its place. The architecture of cryptocurrencies assumes that, in addition to purchasing cryptocurrency, a user can create a new currency unit (or coin) by h