Ransomware Attack - File Encryption

Hi Team,

I need some clarification about file encryption.

If files are already encrypted. Can ransomware affect already encrypted files?

Regards

Hari

  • Hi Hari

    Yes, encrypted files can be re-encrypted by a ransomware attack. The encryption process does not care if a file is encrypted. 

    Anubis

  • In reply to Anubis:

    Thanks Anubis

    Do you have any document for regarding the same.

    Regards

    Hari

  • In reply to HARI KRISHNAN K:

    Hi Hari

    I am going through our documentation to see if I am able to find an article that I can provide to you.

    This may take a bit of time for me to locate it if we do indeed have one.

    I will post it in a reply to you if I am able to locate it.

  • In reply to Anubis:

    Thank you Anubis

    Regards

    Hari

  • In reply to HARI KRISHNAN K:

    Hi - Sophos does have products that can prevent encrypting malware, but SafeGuard is not one of them!

    The Malware would encrypt all files (sometimes targeted file types) but them being encrypted (or the disk being encrypted) already would sadly make no difference to the software.

    You would just have them "double" encrypted! 

    There are other products on the market from other suppliers - but Sophos Intercept X is the current product that can help mitigate this.

     

    www.sophos.com/.../intercept-x.aspx