As a consequence, there is no simple technological ‘silver bullet’ that will wipe out the crypto-ransomware threat. The findings of the research indicate that responses to crypto-ransomware are made more complex by the nuanced relationship between the technical (malware which encrypts) and the human (social engineering which still instigates most infections) aspects of an attack.

By drawing upon in-depth interviews with victims and law enforcement officers involved in twenty-six crypto-ransomware attacks between 20 and using an inductive content analysis method, we develop a data-driven taxonomy of crypto-ransomware countermeasures. We outline how, for various reasons, victims and investigators struggle to respond effectively to this form of threat. This article explores empirically how organisations and investigators have reacted to the shift in the ransomware landscape from scareware and locker attacks to the almost exclusive use of crypto-ransomware. The cybersecurity industry has responded with a similar degree of adaptiveness, but has focussed more upon technical (science) than ‘non-technical’ (social science) factors. Year in and year out the increasing adaptivity of offenders has maintained ransomware's position as a major cybersecurity threat.

Download cryptolocker ransomware