Performing a Ransomware Attack
Assessment Questions 10 points 1. What is the major difference between a ransomware attack and other types of cybersecurity threats?
2. What primary motivation is used in a ransomware attack to get payment from the victim?
3. What is the most likely primary purpose of a ransomware attack being conducted against an enemy during a conflict?
4. How can the compromise of a single machine in a target network using a ransomware attack result in the disruption of many parts of the victim’s
systems?
5. An attacker has sent out a mass email to attempt ransomware attacks on a target company. The ransomware generates a symmetric key to encrypt the victim’s data. It generates an asymmetric key pair and uses the public key to encrypt the symmetric key. The malware server receives the information needed to restore the victim’s data and stores it in a log file. What does the attacker need to send to a victim if they choose to honor the ransom demand? 6. What is the name of the algorithm that represents a type of asymmetric key pair?
7. Describe in one sentence the target that would be the most promising to a threat actor planning a new ransomware attack through spear phishing
8. A promising victim at a target company has been identified. The victim has received some training on basic computer security. Describe the name of the technique that would be the best approach in a spear fishing attack to deploy a ransomware dropper script.
9. Describe in one sentence the action that is a reasonable mitigation for most companies that can be effective at preventing ransomware attacks from succeeding
10. What is the name of the technology(ies) that can be used to detect emails that are sent from malicious servers but appear to come from the target company’s domain
