Skip to main content

FBI: 'Ransomware' virus infecting computers, seizing data

Ransomware demands payment from victims

SAN ANTONIO – The Federal Bureau of Investigation is warning computer users about a specific type of computer virus known as “Ransomware” that is continuing to make the rounds in cyberspace.

Ransomware gets its name from the fact that it seizes control of computer users’ data -- everything from files to photos -- and demands that they pay a ransom to get that control back.

Recently, the FBI took control of two programs of that type, “GameOver Zeus” and “Cryptolocker.”

However, Special Agent Jim Thompson with the San Antonio FBI office warns that it did not mean the end of the threat to computer users.

"Since that time, the criminals have reorganized and there are new versions of the same kind of encrypting software,” Thompson said. "Like any crime problem you'll see, it's a cat-and-mouse game between law enforcement and the criminals."

Thompson said most malware of this type will encrypt or encode all of the files on infected computers. The owners will then receive a message informing them how to submit payment to obtain the decryption key -- or code -- to unlock the data.

"Of course, we encourage people not to pay these ransoms because they do go straight into organized crime syndicates,” Thompson said.

Computer users, he said, also potentially could lose a lot of money. Some programs demand that they pay the ransom in an online currency known as bitcoin.

Thompson said bitcoin can be difficult for ordinary people to obtain, and some victims will then be persuaded to give the criminals access to their bank accounts.

The best way to avoid falling victim to any of it is to prevent the computer from being infected in the first place, Thompson said.

"Be especially cautious when you're opening emails and email attachments because that's one way that this virus is spreading," he said.

Thompson also recommends that computer users have a good anti-virus program in place, and maintain updated applications and operating systems.

Lastly, he recommends that users back up all files onto a drive that is not connected to the computer on an ongoing basis.

"Because the ruthless thing about these encryption-ware programs is that they will encrypt everything that the computer is touching," Thompson said.

If you believe your computer has been infected, you can contact the U.S. Department of Justice for help at at this website.

For additional information on safeguarding your computer, click on this link.


Recommended Videos