The National Information Technology Development Agency (NITDA) has warned Nigerians to be wary of IGVM file extension, reports ITREALMS.
A IGVM file is a file-encrypting ransomware infection that restricts access to data including documents, images, videos by encrypting files with the “igvm” extension.
NITDA in a press statement available to ITREALMS by its Head, Corporate Affairs and External Relations, NITDA, Mrs Hadiza Umar, noted that IGVM ransomware attempts to extort money from victims by requesting for “ransom”, in the form of bitcoin cryptocurrency in exchange for access to data.
This crypto-virus, ITREALMS gathered, spreads in different methods like web injectors, pirated software, spam emails, malicious software bundles, fake software updates, and deceiving online ads.
"The primary task of IGVM ransomware virus is to check your computer system for target file formats and encrypt them using a private RSA key. Once virus locks the files, it then runs several commands via CMD.exe to delete Volume Shadow Copies from your system.
NITDA thereby urged Nigerians to follow these recommendations:
Ensure regular data backup and recovery plan for all critical information.
Do not follow unsolicited web links in emails.
Do not download or open suspicious email attachments.
Do not open emails from suspicious recipients.
Furthermore, if paying up seems like the only reason to get your files back, we strongly advise against ransom payments.
"The so-called decryption tool can be faulty or fail to work due to data modification on your end, as well as avoid funding this illegal business model."
NITDA in a press statement available to ITREALMS by its Head, Corporate Affairs and External Relations, NITDA, Mrs Hadiza Umar, noted that IGVM ransomware attempts to extort money from victims by requesting for “ransom”, in the form of bitcoin cryptocurrency in exchange for access to data.
This crypto-virus, ITREALMS gathered, spreads in different methods like web injectors, pirated software, spam emails, malicious software bundles, fake software updates, and deceiving online ads.
"The primary task of IGVM ransomware virus is to check your computer system for target file formats and encrypt them using a private RSA key. Once virus locks the files, it then runs several commands via CMD.exe to delete Volume Shadow Copies from your system.
"It equally prevents the victims from restoring their file copies for free, using Windows tools. Next, the virus modifies Windows HOSTS file by adding a list of domains to it.
"These domains are mostly computer or IT-relates websites, so the attackers capitalize on this measure to prevent the victim from seeking help or information online.
NITDA thereby urged Nigerians to follow these recommendations:
Ensure regular data backup and recovery plan for all critical information.
Use application whitelisting to help prevent malicious software and unapproved programs from running.
Keep operating system and software up-to-date with the latest patches.
Maintain up-to-date anti-virus software, and scan all software downloaded from the internet before installing.
Do not follow unsolicited web links in emails.
Do not download or open suspicious email attachments.
Do not open emails from suspicious recipients.
Furthermore, if paying up seems like the only reason to get your files back, we strongly advise against ransom payments.
Various cybersecurity experts do not recommend paying up due to some reasons including that the criminals might stop responding as soon as you transfer money to their virtual wallet address.
"The so-called decryption tool can be faulty or fail to work due to data modification on your end, as well as avoid funding this illegal business model."
NITDA declared, the fact that ransomware operators collect millions in ransoms each year simply encourages people to join this cybercrime industry.
She further advised that to report an incident, contact NITDA CERRT via email support@cerrt.ng or via telephone +2348178774580.
She further advised that to report an incident, contact NITDA CERRT via email support@cerrt.ng or via telephone +2348178774580.
Chuks Egbune/Editor
No comments:
Post a Comment