Which ransomware is described as attacking victims through email campaigns and demanding bitcoins for decryption?

Which ransomware is described as attacking victims through email campaigns and demanding bitcoins for decryption?

• A. Dharma
• B. eCh0raix
• C. SamSam
• D. Worms

Answer: (A)

Ransomware often spreads through social engineering, with attackers sending phishing emails that entice users to open an attachment or click a link. Once clicked, the malware installs, encrypts the victim’s files, and demands payment in Bitcoin to decrypt them. This pattern fits Dharma, a ransomware family well known for propagating through email campaigns and demanding Bitcoin in exchange for decryption. The other options don’t match as closely. eCh0raix targeted exposed QNAP NAS devices and spread mainly by exploiting weak or default credentials, not by broad email phishing campaigns. SamSam relied on manual intrusions into networks (often via vulnerable services or stolen credentials) rather than mass email-based delivery. Worms describe a class of self-replicating malware and are not defined by a ransomware campaign that uses email to prompt Bitcoin payments.

Ransomware often spreads through social engineering, with attackers sending phishing emails that entice users to open an attachment or click a link. Once clicked, the malware installs, encrypts the victim’s files, and demands payment in Bitcoin to decrypt them. This pattern fits Dharma, a ransomware family well known for propagating through email campaigns and demanding Bitcoin in exchange for decryption.

The other options don’t match as closely. eCh0raix targeted exposed QNAP NAS devices and spread mainly by exploiting weak or default credentials, not by broad email phishing campaigns. SamSam relied on manual intrusions into networks (often via vulnerable services or stolen credentials) rather than mass email-based delivery. Worms describe a class of self-replicating malware and are not defined by a ransomware campaign that uses email to prompt Bitcoin payments.