What is a ransomware and how does it work?

Abstract

The purpose of this bachelor’s thesis was to create an educational guide about ransomware for organizations as well as other individuals, which raises awareness in defending against ransomware attacks. In this thesis a well-known ransomware called “Black Basta” was investigated and analyzed. One objective was to compile a comprehensive theoretical framework about malware, focusing on ransomware, which provides the necessary foundation for later understanding how ransomware attacks work. Another goal was to examine what happens when a ransomware gets detonated.

The theoretical part of this thesis answers to questions such as what malware are, how do they differ from other malware, how do ransomware work. This part also goes through the process of a ransomware attack and how attackers succeed in a ransomware attack. The empirical part of this thesis was done with qualitative methods. It further inspects the topic on a practical level to truly gain an understanding about ransomware.

The outcome of this thesis was successful since an educational guide that answers to each research questions with theoretical or practical examples was compiled. As ransomware attacks evolve rapidly, it is essential to be up to date with this subject and the tactics, techniques, and procedures that the cyber attackers use. This thesis can be used for this purpose of teaching organizational staff or other individuals wanting to be aware on how to be prepared for a ransomware attack.