Preventive and reactive security measures can only partially mitigate the damage caused by modern ransomware attacks. The remarkable amount of illicit profit and the cybercriminals' increasing interest in ransomware schemes demonstrate that current defense solutions are failing, and a large number of users are actually paying the ransoms. In fact, pure-detection approaches (e.g., based on analysis sandboxes or pipelines) are not sufficient, because, when luck allows a sample to be isolated and analyzed, it is already too late for several users!

By Alessandro Barenghi, Alessandro Guagnelli, Andrea Continella, Federico Maggi, Giovanni Zingaro, Giulio De Pasquale, & Stefano Zanero

Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefi...