Editing Malware (section)

====Ransomware====
{{Main|Ransomware}}
Ransomware prevents a user from accessing their files until a ransom is paid. There are two variations of ransomware, being crypto ransomware and locker ransomware.<ref>{{Cite journal|last1=Richardson|first1=Ronny|last2=North|first2=Max|date=2017-01-01|title=Ransomware: Evolution, Mitigation and Prevention|url=https://digitalcommons.kennesaw.edu/facpubs/4276|journal=International Management Review|volume=13|issue=1|pages=10–21|access-date=23 November 2019|archive-date=5 October 2022|archive-url=https://web.archive.org/web/20221005110429/https://digitalcommons.kennesaw.edu/facpubs/4276/|url-status=live}}</ref> Locker ransomware just locks down a computer system without encrypting its contents, whereas crypto ransomware locks down a system and encrypts its contents. For example, programs such as [[CryptoLocker]] [[Encryption|encrypt]] files securely, and only decrypt them on payment of a substantial sum of money.<ref>{{cite news|last=Fruhlinger|first=Josh|date=2017-08-01|title=The 5 biggest ransomware attacks of the last 5 years|publisher=CSO|url=https://www.csoonline.com/article/3212260/ransomware/the-5-biggest-ransomware-attacks-of-the-last-5-years.html|access-date=2018-03-23|archive-date=24 March 2018|archive-url=https://web.archive.org/web/20180324041022/https://www.csoonline.com/article/3212260/ransomware/the-5-biggest-ransomware-attacks-of-the-last-5-years.html|url-status=dead}}</ref>

Lock-screens, or screen lockers is a type of "cyber police" ransomware that blocks screens on Windows or Android devices with a false accusation in harvesting illegal content, trying to scare the victims into paying up a fee.<ref>{{cite web|url=https://www.welivesecurity.com/wp-content/uploads/2016/02/Rise_of_Android_Ransomware.pdf|title=Rise of Android Ransomware, research|publisher=[[ESET]]|access-date=19 October 2017|archive-date=19 October 2017|archive-url=https://web.archive.org/web/20171019221531/https://www.welivesecurity.com/wp-content/uploads/2016/02/Rise_of_Android_Ransomware.pdf|url-status=live}}</ref>
Jisut and SLocker impact Android devices more than other lock-screens, with Jisut making up nearly 60 percent of all Android ransomware detections.<ref>{{cite web|url=https://www.malwarebytes.com/pdf/white-papers/stateofmalware.pdf|title=State of Malware, research|publisher=[[Malwarebytes]]|access-date=19 October 2017|archive-date=21 May 2017|archive-url=https://web.archive.org/web/20170521075657/https://www.malwarebytes.com/pdf/white-papers/stateofmalware.pdf|url-status=dead}}</ref>

Encryption-based ransomware, like the name suggests, is a type of ransomware that encrypts all files on an infected machine. These types of malware then display a pop-up informing the user that their files have been encrypted and that they must pay (usually in Bitcoin) to recover them. Some examples of encryption-based ransomware are [[CryptoLocker]] and [[WannaCry ransomware attack|WannaCry]].<ref name="w174">{{cite journal|last1=O'Kane|first1=Philip|last2=Sezer|first2=Sakir|last3=Carlin|first3=Domhnall|title=Evolution of ransomware|journal=IET Networks|volume=7|issue=5|date=2018|issn=2047-4954|doi=10.1049/iet-net.2017.0207|pages=321–327}}</ref>