Introducing Symantec Security Response's new ransomware threat classification
Article ID: 163557
Updated On:
Products
Issue/Introduction
Ransomware has now grown into one of the biggest dangers facing businesses and consumers today. 2015 was a record year, with one hundred new ransomware families discovered.
To simplify Symantec's naming convention for ransomware, Symantec Security Response is now issuing classifications that best reflect the commonly-used names for these threat families and variants.
Cause
Whatever the name for ransomware, take proper measures to protect your data and organization from ransomware threats. These resources can assist:
Resolution
To ease the short transition process, the following cross-reference is provided that lists known crypto threats' original classification, and our new name. Future ransom variants will be assigned a name in accordance with this new naming convention.
For example, samples of the prevalent Locky threat (also known as Zepto) will be detected as Ransom.Locky rather than the previous, less descriptive classification Trojan.Cryptolocker.AF.
Note: Symantec Security Response write-ups do not exist for every ransomware-related signature.
Feedback
