Crypto-Ransomware Analysis and Detection: Strengthening Security Measures

Abstract

Since the advent of the wide adoption of virtual currency (such as Bitcoin, Ethereum, Ripple, and Litecoin), some with
ill intents have become interested in this space and have created and sold ransomware to make easy access to virtual
currency. Using cunning techniques, this ransomware enters the victim's computer and encrypts all of the files on it.
Following the procedure for encryption, the intruder leaves a notice threatening to prevent entry to the encrypted data
unless a virtual currency ransom is paid. The biggest threat to information technology security at the moment is this
kind of ransomware, which is growing in popularity over time. Numerous studies about the identification and
examination of this cyberbullying can be found in the literature. In this study, we looked closely at a forensic
investigation of a recent attack example with an emphasis on crypto-ransomware. In this instance, the attack technique
and the crypto-ransomware's behaviour were examined, and it was found that the attacker's data was available. Given
this aspect, we believe our research will make a substantial contribution to the fight against this danger.