Without a doubt, ransomware is one of the worst security threats that we can find on the Internet. Hackers use this type of malware to encrypt files or even delete them. They ask for an economic rescue to prevent this from happening and that is the way to profit. In this article we cover RedAlert ransomware , a new very dangerous threat that affects different operating systems and can cause us to lose files.
RedAlert, a dangerous new ransomware
This new security threat has been detected by MalwareHunterTeam . They indicate that, when encrypting files, it uses the NTRUEncrypt public key encryption algorithm. It is capable of encrypting VMware ESXi virtual machines and targets Linux and Windows servers. In samples made by security researchers, this ransomware adds .crypt658 extension to files.
Also, once it encrypts the files it will add a ransom note. This is common in this type of threat, as it is the hackers’ way of informing the victim of how to proceed to recover the files. In this case it will create a note with the name HOW_TO_RESTORE .
In that note they will add the stolen data, with the threat of erasing it forever or distributing it. They also add a link to make the payment through TOR and that is unique for each victim. This is common and is very present in other attacks of this type. It is one of the bases of ransomware. One peculiarity is that the RedAlert ransomware only accepts payment through the Monero cryptocurrency.
Security researchers indicate that they have not detected much activity in this new ransomware, but they warn that it is advisable to be prepared and prevent it from infecting our computers.
Tips to avoid this ransomware
So what can we do to avoid these kinds of threats? Be it RedAlert ransomware or something similar, it is imperative to always keep common sense and avoid making mistakes. In most cases the attacker will need you to download a file or click on a malicious link. Avoiding this will significantly improve security.
Another very important point is to always have security programs . A good antivirus can alert you in case any threat enters. For example Windows Defender or Avast are two good solutions. Although that does not mean that you are completely protected from ransomware, it will help a lot.
Keeping everything up to date is also essential to protecting data from ransomware. In many cases they will take advantage of vulnerabilities that may exist in the system or in any program that we use. Having the latest versions means that we will be able to correct those problems.
All in all, RedAlert ransomware is a new threat that can be very dangerous. It is essential that you take steps to protect yourself not only from this type of malware, but from any similar malware that also compromises your personal data online.