Paradise ransomware seems to have made a return. Having been active in September 2017 and then seemingly vanishing, it has now reappeared in a new round of attacks. New attacks started being reported in January 2018 and its still about now.
The ransomware is spread via email as a zip file attachment. If the user opens the attachment, unpacks it and then runs the extracted application they become infected. If the computer is connected to a network the ransomeware may well spread across the network, infecting other devices.
Given the Paradise ransomware can be leveraged using the Ransomware as a Service model, it means it is freely available to people who know where to look. Paradise uses an RSA cipher for file encryption, which is an unusual choice, but more importantly, the encryption it uses is unbreakable.
How To Protect Yourself!
As with most computer nasties, there are three key steps. We’ve numbered them all as 1. below because YOU MUST DO THEM ALL
1. Train staff to recognise suspicious emails they receive and raise the alarm.
1. Have backups of your data files stored away from your computer/network, such as Cloud 9 Vault
1. Invest in top quality Security Software…not just fee stuff.