According to reports, cyber criminals and malicious groups are using ransomware intermittent encryption technology to bypass cyber security.<\/p>\n\n\n\n
Intermittent encryption<\/a> consists of encrypting only parts of the targeted content, which would still render the data unrecoverable without using a valid decryption key. <\/p>\n\n\n\n As only part of the file is encrypted, the process is much faster and harder to spot, meaning that ransomware detection software can fail to spot such attacks. This is because partially encrypted files may not be regarded as malicious by the software, which usually only recognise attacks on a larger scale where files are fully encrypted. <\/p>\n\n\n\n LockFile, part of the ransomware family, was noted in 2021<\/a> as the first known ransomware to use intermittent encryption \u2013 it worked by encrypting every 16 bytes of a file. However, since this was reported, several other groups have been found to have deployed this approach.<\/p>\n\n\n\n Other threat actors reported to have used intermittent encryption include Qyick and BlackCat, which are being sought for investigation in lab environments by researchers. <\/p>\n\n\n\n Intermittent encryption poses a huge risk for businesses and individuals alike, as attacks can go virtually undetected, and can be carried out with ease. <\/p>\n\n\n\n Organisations are advised to maintain a secure cyber security system through backups, up to date software, and keeping an eye on the current threat landscape. <\/p>\n\n\n\n If you are concerned about the<\/strong> impact ransomware could have on your business, please contact us at <\/strong>enquiries@nebrcentre.co.uk<\/strong><\/a><\/strong><\/p>\n\n\n\n To stay up to date with the latest cyber security news,\u00a0and gain access to a wealth of\u00a0resources<\/a> and support, why not sign up for our\u00a0<\/strong>free core membership?<\/strong><\/a><\/p>\n\n\n\n