Ransomware Families

Abstract

Ransomware can be classified into groups using different criteria, for example, according to its function such as whether it is a locker or encryption ransomware. Security experts prefer to classify ransomware into families according to its code signature, which contains the sequence of commands and instructions responsible for the malicious action. For this chapter, I will mention the most prominent ransomware families and their popular variants according to their release date and talk a little bit about each one; later in the book, I will give decryption utilities for each family where available.