Some malware variants are capable of encrypting files over network shares, even if they are not mapped to a drive letter. Discover ransomware that takes advantage of Server Message Block (SMB) vulnerabilities to access file shares and encrypt data.
- [Instructor] A network administrator maps a drive…to provide a shortcut for users to locate network resources.…It's very easy to do.…Here I'm in Windows Explorer and I'll go to Computer.…There we'll select Map network drive.…I'll select whatever letter that is not used,…and then it says What network folder would you like to map?…At that point you would browse to the folder…that you would like to link,…and then you would have a mapped drive.…
In a standard ransomware attack,…the malware obtains a list of all the drives…on the system, starting with A.…And then traversing through other mapped network drives,…such as C, D, E, et cetera.…Some malware variants are capable of encrypting files…over network shares, even if they are not mapped…to a drive letter.…The ransomware inventories any open…network server message bock shares,…and encrypts any that are found.…
Server message block is designed for local networks…and uses authentication.…It's a client server request response…network file sharing protocol.…Servers make file systems and other resources…
- How ransomware works
- Types of ransomware
- Safeguarding Windows
- Securing your router
- Updating software and operating systems
- Spam, phishing, and spoofing
- Reporting ransomware
Skill Level Beginner
Ransomware: Practical Reverse Engineeringwith Malcolm Shore1h 22m Intermediate
Malware: Defense and Responsewith Scott M Burrell40m 46s Intermediate
Windows Performance Toolkit: Malware Analysiswith Thomas Pantels1h 4m Intermediate
1. Ransomware Overview
2. Types of Ransomware
3. Safeguarding Windows
4. Good Practice
Next steps1m 25s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.