Multi-lock ransomware Cybercrooks have forged a strain of ransomware that uses a unique encryption key for each locked file. CryPy fetches unique encryption keys to individually encrypt files on compromised systems. The tactic gives crooks the ability to selectively unlock compromised files, potentially allowing crooks to extort more cash from …
... the next step is to add analytics so that they "know" the relative values of the files encrypted under each key. In the beginning, that would likely involve traffic back and forth from the command and control server(s).
Later, on-site with very little traffic required at all.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
