Why ransomware criminals need great customer service

Yes, even bad-guy malware developers have to keep their "customers" happy. Read what happens when F-Secure tests the "help desks" of four crypto-locking malware makers.

Ransomware developers have customers, however unwilling they may be. Thus, these criminals also have customer service. But is it effective? F-Secure, a company that specializes in security and anti-malware products for consumers and corporations, decided to evaluate the “help desks,” if you will, of ransomware malware, which covertly encrypts files on victims’ machines, and then demands fees paid in Bitcoin to unlock the unwanted encryption.

As with piracy and hostage-taking on the high seas, ransomware developers depend on providing honest, effective service after committing their crimes. As F-Secure notes in a breezy, darkly amusing white paper released Monday, “Without establishing a reputation for providing reliable decryption, their victims won’t trust them enough to pay them.” Indeed, killing the “hostages”—a user’s files—after accepting payment and not decrypting documents would quickly make this kind of attack unprofitable, as people would stop paying. (Though that doesn’t stop some malware makers from peeing in the pool.)

F-Secure approached the exercise as if reviewing common, legitimate software and services. It created a fake identity, “Christina Walters,” and then allowed “her” system to be infected by the major families of ransomware. F-Secure then examined the quality of the ransomware interface, the clarity of an associated website, and the willingness of customer support to educate the target about payment, and to engage in negotiation over price and deadline.

“Ransomware has always been technologically possible. It’s the customer service that didn’t scale,” said Sean Sullivan, F-Secure Labs’ security adviser, in an interview. He noted that the TOR network, used for identity-obscuring browsing, together with Bitcoin provided the missing piece. “The only thing that kept it from scaling was the getting paid part,” Sullivan said.

While one ransomware attacker’s organization didn’t respond, F-Secure’s “Christina” corresponded with the other four. F-Secure was able to obtain one or more extensions to its payment deadline in those four cases, and negotiated a lower fee in three out of the four infections.

But, again, please read the F-Secure white paper. It provides eye-opening illustrations of how the bad guys actually operate in the wild.

The impact on you: Because crypto-ransomware can use any vector for infection, the best defenses are simple ones. First, keep your computer’s operating system up to date and fully patched, without Flash or Java installed and active. Microsoft Office macros should be disabled. Second, do continuous, up-to-date backups that retain multiple older versions of files. This way, if you do become a victim of ransomware, you’ll have backups of all the files under the encryption attack. Third, avoid visiting dubious websites, and never open unexpected, unsolicited ZIP files and email attachments. You should also train those around you, whether they be friends, family or co-workers, to exercise the same caution.

F-Secure, like other security software vendors, also suggests you install anti-malware software that shuts down malware vectors and provides alerts about unexpected system behavior.

Join the PC World newsletter!

Error: Please check your email address.

Tags ransomeware attackersmalware

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Glenn Fleishman

PC World (US online)
Show Comments

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?