https://github.com/eddiechu/Ransomware-meets-loop

What if the ransomware meets an endless subfolder
https://github.com/eddiechu/Ransomware-meets-loop

infosec ransomware security

Last synced: over 1 year ago
JSON representation

What if the ransomware meets an endless subfolder

• Host: GitHub
• URL: https://github.com/eddiechu/Ransomware-meets-loop
• Owner: eddiechu
• Created: 2022-07-12T12:29:27.000Z (almost 4 years ago)
• Default Branch: main
• Last Pushed: 2022-07-24T15:06:57.000Z (almost 4 years ago)
• Last Synced: 2024-10-31T05:35:16.162Z (over 1 year ago)
• Topics: infosec, ransomware, security
• Homepage:
• Size: 15.1 MB
• Stars: 8
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# Ransomware meets loop

Ransomware encrypts all files and subfolder files in such as Pictures, Documents, and Videos so they cannot be accessed, to panic users. 

What if the ransomware meets an endless subfolder ...

![alt text](https://github.com/eddiechu/Ransomware-meets-loop/blob/main/image/loop1.gif?raw=true)

###### Build loop folder

1. Open command prompt, go to test folder, e.g. C:\Temp

2. Create a sub folder named ``mkdir !loop_for_ransomware``

3. run ``cd !loop_for_ransomware``

4. run ``mklink /d one ..\!loop_for_ransomware``

5. run ``mklink /d two ..\!loop_for_ransomware``

6. these 2 symbolic links form an endless loop, you can verify this by ``dir /s``

###### Test

1. Open command prompt, go to test folder, e.g. C:\Temp

2. run ``for /R %x in (*.*) do ren "%x" *.test``, to simulate "ransomware operation"

###### Result

You can see only the first level files in the parent folder is affected, the files under subfolder have no change, because the "ransomware operation" is looped in the subfolder of ``!loop_for_ransomware``

###### P.S. Exclude this folder ``!loop_for_ransomware`` in the antivirus schedule scan and backup software

###### Reference

https://ss64.com/nt/mklink.html

#

ransomware simulation

ransomware assessment

eddie chu

eddiechu.android@gmail.com

anti-ransomware

endpoint test

infosec

security

cyber security

cybersecurity

incident response

hacker

antimalware

anti-malware

defense

testing

pentest

penetration test

Running wheel for Ransomware