Potential silver lining to the creation of crypto-malware.

Question

Rod-IT wrote:MerlinYoda wrote:Upon detecting the suspicious activity as a result of Malory's on remote connection to Alice's system, the software immediately encrypts (for a second time in this case)
Full disk encrypted systems detect and abort if another product is installed that can or is encrypting the disk already to avoid double encryption and the overhead and mess that this can cause.From what your saying above, every time suspicious activity is detected the files will re-encrypt... that could create hundreds of levels of encrypted encryptions.... phew!
Good point. There would have to be some mechanism to prevent multiple layers of encryption by the software of the same files due to multiple breaches. I'd imagine something like this could probably be accomplished by communication between all instances of the software on the...

Answer 1

MerlinYoda wrote:Scott Alan Miller wrote:MerlinYoda wrote:However, I'm not aware of any digital security solutions where there are means to later recover that data which had intentionally been made effectively inaccessible to anyone whatsoever.
If there were, it would render encryption useless as the malware people would have it first.
Ya, I wasn't quite clear enough on that closing point. I meant later recoverable by the same party for which the encryption was called upon to protect their data in the first place, a legitimate owner/operator of the data and/or device in question.
So the user who has the files encrypted leaves - how does their replacement un-encrypt the files?What stops other people doing the same, what if the data then needs to be shared with others, emailed or sent to a 3rd party who has no way of decrypting these?