Sophos sees common behavior across various infections
Common behaviors shared across all families of ransomware are helping security vendors better spot and isolate attacks.
This according to a report from British security shop Sophos, whose breakdown (PDF) of 11 different malware infections, including WannaCry, Ryuk, and GandCrab, found that because ransomware attacks all have the same purpose, to encrypt user files until a payment is made, they have to generally perform many of the same tasks.
"There are behavioral traits that ransomware routinely exhibits that security software can use to decide whether the program is malicious," explained Sophos director of engineering Mark Loman.
"Some traits – such as the successive encryption of documents – are hard for attackers to change, but others may be more malleable. Mixing it u ..
Support the originator by clicking the read the rest link below.
