You are here: Home » Current Affairs » News » National
Maharashtra joins World Economic Forum in fight against plastic pollution
Business Standard

Ransomware makes victim donate to poor, financial help to needy patients

The company warned that Goodwill ransomware could also result in temporary, and possibly permanent, loss of company data and a possible shutdown of company's operations and accompanied revenue loss

Topics
ransomware | CloudSEK

Press Trust of India 



Ransomware attack, Cyber security
Once infected, the GoodWill ransomware worm encrypts documents, photos, videos, database, and other important files and renders them inaccessible without the decryption key.

A new has been detected in India that makes victims donate new clothes to homeless, feed kids in branded pizza outlets and provide financial help to anyone who needs urgent medical attention but cannot afford it, according to digital risk monitoring firm .

The company warned that the Goodwill could also result in temporary, and possibly permanent, loss of company data and a possible shutdown of the company's operations and accompanied revenue loss.

"GoodWill was identified by researchers in March 2022. As the threat group's name suggests, the operators are allegedly interested in promoting social justice rather than conventional financial reasons," Clousek said in a report.

Once infected, the GoodWill ransomware worm encrypts documents, photos, videos, database, and other important files and renders them inaccessible without the decryption key.

"The actors suggest that victims perform three socially driven activities in exchange for the decryption key- donate new clothes to the homeless, record the action, and post it on social media, take five less fortunate children to Dominos Pizza Hut or KFC for a treat, take pictures and videos, and post them on social media and provide financial assistance to anyone who needs urgent medical attention but cannot afford it, at a nearby hospital, record audio, and share it with the operators," the report said.

Once all three activities are completed, the ransomware asks victims to write a note on social media (Facebook or Instagram) on "how you transformed yourself into a kind human being by becoming a victim of a ransomware called GoodWill."

Upon completing all three activities, the ransomware operators verify the media files shared by the victim and their posts on social media.

The actor will then share the complete decryption kit which includes the main decryption tool, password file and a video tutorial on how to recover all important files, the report said.

"Our researchers were able to trace the email address, provided by the ransomware group, back to an India-based IT security solutions & services company, that provides end-to-end managed security services," the report said.

TO READ THE FULL STORY, SUBSCRIBE NOW NOW AT JUST RS 249 A MONTH.

SUBSCRIBE TO INSIGHTS

What you get on Business Standard Premium?

  • icon Unlock 30+ premium stories daily hand-picked by our editors, across devices on browser and app.
  • icon Full access to our intuitive epaper - clip, save, share articles from any device; newspaper archives from 2006.
  • icon Curated newsletters on markets, personal finance, policy & politics, start-ups, technology, and more.
  • icon Pick your 5 favourite companies, get a daily email with all news updates on them.
  • icon 26 years of website archives.
  • icon Preferential invites to Business Standard events.

OR


Subscribe to Business Standard Premium

Exclusive Stories, Curated Newsletters, 26 years of Archives, E-paper, and more!

Insightful news, sharp views, newsletters, e-paper, and more! Unlock incisive commentary only on Business Standard.

Download the Business Standard App for latest Business News and Market News .

First Published: Mon, May 23 2022. 01:53 IST

RECOMMENDED FOR YOU

.