87Views4Replies
Encryption and Ransomware?
If I encrypted a hard drive, then get hit with some ransomware that encrypts files, would anything happen?
If I encrypted a hard drive, then get hit with some ransomware that encrypts files, would anything happen?
Comments
4 years ago
That depends:
If the hard drive is mounted (i.e. accessible, because you started the decryption program and entered the password) the ransomware will encrypt file by file with its own secret key. You can't access the files any more.
If the hard drive is not mounted, but just a single gigantic file, the ransomware will just encrypt this big container file. You will not be able to access a single file in it any more.
If the hard drive is not mounted and hidden from the file system (like been stored in an 'unused' part of the real drive, well then you are secure. Up to the moment, you mount the drive...
Reply 4 years ago
I see. That does clear alot up now
4 years ago
ransomware doesn't encrypt files; it deletes them but saves the file name
Reply 4 years ago
Some delete them, others encrypt.