Ransomware: stages, detection and evasion

• Main Authors: Yus Kamalrul, Mohamed Yunus, Syahrulanuar, Ngah
• Format: Conference or Workshop Item
• Language: English
• Published: IEEE 2022
• Subjects: QA75 Electronic computers. Computer science
• Online Access: http://umpir.ump.edu.my/id/eprint/35865/7/MCN19001%20Ransomware%20stages%2C%20detection%20and%20evation.submitted.pdf; http://umpir.ump.edu.my/id/eprint/35865/; https://doi.org/10.1109/ICSECS52883.2021.00048
• Institution: Universiti Malaysia Pahang

Ransomware attacks has been increasing lately with companies suffer monetarily, wasted business opportunity and wasted time. Big companies are now targeted as they are more profitable for ransomware threat actor. This paper discuses on stages of ransomware attacks starting from reconnaissance to extortion. It also discusses on steps that organization should take to prevent ransomware attack and several detection methods for ransomware. Other than that, it lists anti-analysis and evasion method used by ransomware to evade detections. Lastly, it discusses the latest ransomware attacks.