
While most traditional and “commercially available” data stealing malware typically targets desktop Windows users, there are many more applicable targets for ransomware, from individual users’ devices, to networks within industry, healthcare or even government. Ransom payment is almost exclusively in Bitcoins. Whereas each variant has its own unique properties, many are adopting similar anonymisation strategies such as using Tor or I2P for communication, and business models offering free test file decryptions to demonstrate their intentions. While police ransomware appears to have dropped off the radar almost completely, the number of cryptoware variants has multiplied. Ransomware continues to be the dominant concern for EU law enforcement.
