What is DIKE Ransomware?

DIKE ransomware is a type of malware that encrypts all the files on a computer until the user pays a ransom. Files encrypted by DIKE will have a .DIK extension appended at the end of the file name. DIKE is delivered through a Win32 EXE file and has been spotted inside the following files and processes: ['Fast.exe']

What is Ransomware?

Ransomware is a type of malware that infects a computer system and locks users out from their system resources, such as files, folders, and applications. It does this by encrypting files with an encryption key. The attacker then demands a ransom from the victim in exchange for decryption of the files. 

How Does Ransomware Spread?

Ransomware attacks are typically delivered via email or a website, but can also be deployed via social media, IM, or other messaging platforms. Once a user clicks on a compromised link or opens an infected file, the ransomware is downloaded and installed on the device.

DIKE Ransomware Capabilities

DIKE ransomware is malware that uses process injection techniques to evade process-based defences and evade detection from security products. DIKE ransomware uses several attack techniques, including scheduled task/job execution, to facilitate its malicious activities. Additionally, DIKE ransomware may use exploit kits to deliver its payload and ransomware encryption keys.

Mitigations Against DIKE Ransomware

DIKE ransomware can be mitigated by configuring endpoint security solutions to block common process injection behaviours and regular backups of all data. This will help to ensure that data can be restored in the event of a ransomware attack. Additionally, configuring settings for scheduled tasks to force tasks to run under the context of the authenticated account instead of allowing them to run as SYSTEM can help to mitigate the effects of a ransomware attack.

How to Protect Against Ransomware?

The best way to protect against ransomware is to have an up-to-date antivirus installed on your computer. This will help your computer block any malicious programs from entering your computer in the first place.

Here are other suggestions to protect against ransomware attacks: 

• Use strong passwords and change them often
• Use multi-factor authentication
• Back up essential data so you have a copy if the ransomware encrypts your files
• Limit the amount of information that is shared online
• Only download software and files from trusted sources
• Use antivirus software to scan your computer for malware
• Update your software regularly to make sure you have the latest security patches
• Avoid opening email attachments or clicking on links from unknown sources
• Use a computer that can't be infected, such as a secure computer or a computer in a public library.