Technique
technique:ransomware
A technique involving encrypting systems or files and demanding payment for decryption; the episode describes NotPetya as destructive malware posing as ransomware.
A technique involving encrypting systems or files and demanding payment for decryption; the episode describes NotPetya as destructive malware posing as ransomware.
“This is typically known as ransomware”
“this was not really ransomware. It was a destructive worm posing as ransomware.”
Technique involving encryption of files and demands for payment to restore access.
“if your files get encrypted and you don’t have the key to decrypt them”
Malware operation involving encryption or destruction of files and demands for payment, as discussed in the episode.
“it was mostly spread by phishing e-mail”
“it was essentially a file shredder”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | NotPetya | Explicit | 54 |
| incoming | USES | WannaCry | Explicit | 73 |
| incoming | USES | WannaCry | Explicit | 158 |
NotPetya USES ransomware
The episode says ransomware was used as the destructive mechanism, even though the attackers were not believed to be seeking money.
Explicit Confidence 98% · Jack Rhysider EP 54 Details
“Their goal was to destroy computers and ransomware was just the perfect tool to do that.”
WannaCry USES ransomware
WannaCry encrypts files and demands payment to unlock them, functioning as ransomware.
Explicit Confidence 99% · Jack Rhysider EP 73 Details
“This is a typical ransomware message”
WannaCry USES ransomware
WannaCry is described as ransomware that encrypted computers and demanded Bitcoin for recovery.
Explicit Confidence 99% · Jack Rhysider EP 158 Details
“The ransomware would soon be called WannaCry”
“you had to pay Bitcoin to get it unlocked again”