Without a doubt, ransomware is one of the worst security threats that we can find on the Internet. Hackers use this type of malware to encrypt files or even delete them. They ask for an economic rescue to prevent this from happening and that is the way to profit. In this article we echo the RedAlert ransomwarea new very dangerous threat that affects different operating systems and can cause us to lose files.
RedAlert, a new and dangerous ransomware
This new security threat has been detected by MalwareHunterTeam. They indicate that, when encrypting files, it uses the NTRUEncrypt public key encryption algorithm. It is capable of encrypting VMware ESXi virtual machines and targets Linux and Windows servers. In samples made by security researchers, this ransomware adds .crypt658 extension to files.
Furthermore, once it encrypts the files it will add a ransom note. This is common in this type of threat, since it is the hackers’ way of informing the victim of how they should proceed to recover the files. In this case you will create a note with the name HOW_TO_RESTORE.
In that note they will add the stolen data, with the threat of erasing it forever or distributing it. They also add a link to perform the payment via TOR and that is unique to each victim. This is common and is very present in other attacks of this type. It is one of the bases of ransomware. One peculiarity is that the RedAlert ransomware only accepts payment through the Monero cryptocurrency.
Security researchers indicate that they have not detected much activity in this new ransomware, but they warn that it is advisable to be prepared and prevent it from infecting our computers.
Tips to avoid this ransomware
So what can we do to avoid these types of threats? Be it RedAlert ransomware or something similar, it is imperative to always keep your common sense and avoid making mistakes. In most cases the attacker will need you to download a file or click on a malicious link. Avoiding this will significantly improve security.
Another very important point is to always have security programs. A good antivirus can alert you in case any threat enters. For example Windows Defender or Avast are two good solutions. Although that does not mean that you are completely protected from ransomware, it will help a lot.
It is also essential to protect data from ransomware to have All updated. In many cases they will take advantage of vulnerabilities that may exist in the system or in any program that we use. Having the latest versions means that we will be able to correct those problems.
All in all, RedAlert ransomware is a new threat that can be very dangerous. It is essential that you take steps to protect yourself not only from this type of malware, but from any similar malware that also compromises your personal data online.
