Bluefield Daily Telegraph, Bluefield, WV

Breaking News

Slate

October 11, 2012

Slate: Pay up or the hard drive gets it

You've just opened a Web page or clicked a link in an email when your computer's desktop goes gray. A browser window pops up with the FBI logo in the top left corner. Below it is a live webcam feed with a picture of someone's face. You try to click away but find that your browser is locked. With a start, you recognize the face staring at you from the screen: It's you.

This isn't the plot of a Japanese horror film. It's a frightening form of malware called "ransomware" that has been seen with increasing frequency in recent months. No one knows exactly how many people have been hit with it, but security firm McAfee reports that it recorded more than 120,000 new samples in the second quarter of 2012, a fourfold increase from the same quarter last year.

There are many variants of ransomware, all of which begin by locking you out of your own machine. The next phase: trying to blackmail, intimidate or otherwise spook you into forking over cash. You probably shouldn't do it. But it's easy to see why a lot of people do.

The version I described in the first paragraph is the product of a virus called Reveton, which you can contract either by clicking a malicious link or visiting an infected website, which triggers an automatic download. Beneath the video feed, which registers the surprise on your face as you recognize yourself, are your computer's IP address and hostname and an urgent message: "Your computer has been locked!" Scroll further and you'll find yourself accused of possessing illegally downloaded files in violation of federal copyright laws. (A new iteration claims that you're in violation of SOPA, the Stop Online Piracy Act - which, as serious netizens know, never actually became law.)

The crime, you're told, is punishable by a fine or up to three years in prison. There's only one way to unlock your computer, according to the warning on your browser, and that's to pay up. And if you don't pay the specified "fine" within 48 or 72 hours - often by purchasing a prepaid cash card such as Green Dot's Moneypak, which makes the transaction hard to trace - it claims that you'll be locked out of your machine permanently and face criminal charges to boot.

The criminal charges are bogus, of course, but the threat of being permanently locked out of your files is real, says Chet Wisniewski, senior security adviser at the data-security firm Sophos. Some victims have reported that, after a certain amount of time passed, their files were in fact deleted. On the other hand, it's unclear whether paying up actually helps, or if it just prompts the bad guys to try to squeeze more out of you. One thing security experts do know is that the scam appears to be automated. It would be a mistake to assume there's an actual human on the other end whom you can persuade to take it easy on you because you really, really need those files.

So what should you do if you're unwary and unlucky enough to contract a ransomware Trojan? First, instructs Sophos' Paul Ducklin in a helpful video, don't panic and don't do anything rash. Once the malware has control of your machine, chances are that most of the damage has already been done. In theory the hackers could mine your files for private information, but in practice they rarely do. Too much effort for an uncertain reward.

And ignore those threats not to tell anyone about the attack. Unless you're an expert yourself, it's a good idea to enlist the help of a computer security expert to help you figure out how to handle it. The FBI - the real FBI - also recommends filing a complaint at www.ic3.gov.

As with most forms of malware, the best protection here is simply to avoid visiting compromised websites or clicking on any suspicious-looking links, whether on the Web or in emails, Twitter or Facebook messages, or even Skype messages. Keeping your operating system and apps updated with the latest security patches always helps, and antivirus software can be an additional prophylactic. But this particular type of attack also reinforces the importance of backing up your files. Otherwise, you might never see them again.

It's conceivable, some security types admit privately, that paying up could prompt the criminals to restore them. But the official advice is that you never should, and in most cases that's the advice that makes the most sense.

 

1
Text Only
Slate
  • baby-generic.jpg For millennials, out-of-wedlock childbirth is the norm

    This month brings us yet another reminder that, for young Americans, having children outside of marriage is very much "the new normal," as The New York Times once put it.

    June 24, 2014 1 Photo

  • May 2014 was the hottest may in recorded history

    According to new data released this week, May 2014 is officially the warmest May in recorded history.
    Both NASA and the Japan Meteorological Agency have tentatively ranked May at the top of historical measurements, though NASA's numbers are preliminary because crucial information is still missing from China.

    June 20, 2014

  • GM recalls soar past 20 million. Why don't consumers care?

    In case you thought there couldn't possibly be another General Motors recall so soon, you're just not thinking big enough. This week, GM said it was recalling 3.36 million more cars. The cause: an ignition switch defect that could result in keys carrying extra weight (read: a keychain) to slip out of position and shut the vehicle off abruptly during "some jarring event."

    June 18, 2014

  • No one is against devoted dads

    Father's Day is Sunday, which means that it's time for pundits and politicians to scold the American public - with special ire reserved for black members of the American public - for our supposed indifference to the wonder and awe of fatherhood.

    June 12, 2014

  • 74129880-graduates.jpg The fate of the overeducated and underemployed

    According to the Federal Reserve Bank of New York, about 44 percent of young bachelor's degree holders lucky enough to be working are employed in positions that technically don't require their degree. While that number isn't far off from the historical norm — 22-year-olds have always needed a little time to find their professional footing — the fraction stuck scraping bottom in truly low-paying jobs has grown quite a bit since the recession.

    June 4, 2014 1 Photo

  • Skype's real-time language translator

    This week at Re/Code's Code Conference, Microsoft announced a real-time, multilingual translation beta called Skype Translate. The service can mediate between two video chatterers who speak different languages by providing text and audio translation after each person finishes speaking. Currently the service works for English and German, but Microsoft says it will support other languages soon. The beta will be released later this year.

    May 29, 2014

  • New Orleans does away with traditional public schools

    The second-graders paraded to the Dumpster in the rear parking lot, where they chucked boxes of old work sheets, notebooks and other detritus into the trash, emptying their school for good.

    May 29, 2014

  • Amazon sells steroids and stimulants banned in sports

    I have by no means executed a comprehensive search of wares sold by Amazon directly or through its third-party sellers, but I found other prescription drugs for sale without a prescription, including the antibiotic norfloxacin and the muscle relaxant methocarbamol. Both compounds, like clindamycin, warrant careful oversight to avoid complications or endangering public health, such as by breeding antibiotic resistance.

    May 29, 2014

  • 2010-Winter-Olympic-Games-001.jpg Nobody wants to host the Winter Olympics

    If we end up watching slopestyle from the Central Asia steppes in 2022, it will likely be because it's becoming clear that nobody in Europe wants to host these Olympics anymore. Publics may finally be getting wise to the fact that the long-term economic benefits of hosting mega-events like the Olympics or the World Cup are usually negligible at best.

    May 27, 2014 1 Photo

  • Woman sues a New York Hospital for forcing a C-section. Can doctors do that?

    Though Dray's doctor claims he did not force her to have a C-section, her hospital record included a note signed by the hospital's director of maternal and fetal medicine that said, "I have decided to override her refusal to have a C-section."

    May 21, 2014