Abstract:In recent years, ransomware has been one of the most notorious malware targeting end users, governments, and business organizations. It has become a very profitable business for cybercriminals with revenues of millions of dollars, and a very serious threat to organizations with financial loss of billions of dollars. Numerous studies were proposed to address the ransomware threat, including surveys that cover certain aspects of ransomware research. However, no study exists in the literature that gives the complete picture on ransomware and ransomware defense research with respect to the diversity of targeted platforms. Since ransomware is already prevalent in PCs/workstations/desktops/laptops, is becoming more prevalent in mobile devices, and has already hit IoT/CPS recently, and will likely grow further in the IoT/CPS domain very soon, understanding ransomware and analyzing defense mechanisms with respect to target platforms is becoming more imperative. In order to fill this gap and motivate further research, in this paper, we present a comprehensive survey on ransomware and ransomware defense research with respect to PCs/workstations, mobile devices, and IoT/CPS platforms. Specifically, covering 137 studies over the period of 1990-2020, we give a detailed overview of ransomware evolution, comprehensively analyze the key building blocks of ransomware, present a taxonomy of notable ransomware families, and provide an extensive overview of ransomware defense research (i.e., analysis, detection, and recovery) with respect to platforms of PCs/workstations, mobile devices, and IoT/CPS. Moreover, we derive an extensive list of open issues for future ransomware research. We believe this survey will motivate further research by giving a complete picture on state-of-the-art ransomware research.

An exploratory data analysis of malware/ransomware cyberattacks: insights from an extensive cyber loss dataset

An Empirical Study of Data Disruption by Ransomware Attacks

A Survey of Crypto Ransomware Attack Detection Methodologies: An Evolving Outlook

Ransomware Reloaded: Re-examining Its Trend, Research and Mitigation in the Era of Data Exfiltration

Ransomware Detection Using Machine Learning: A Review, Research Limitations and Future Directions

Ransomware threat mitigation through network traffic analysis and machine learning techniques

An investigation of ransomware incidents in the maritime industry: Exploring the key risk factors

A Survey on Ransomware: Evolution, Taxonomy, and Defense Solutions

Crypto-Ransomware and Their Defenses: In-depth Behavioral Characterization, Discussion of Deployability, and New Insights

Volenti non fit injuria: Ransomware and its Victims

Data-Centric Machine Learning Approach for Early Ransomware Detection and Attribution

Showing the Receipts: Understanding the Modern Ransomware Ecosystem

Economic Analysis of Ransomware

A comprehensive analysis combining structural features for detection of new ransomware families

Fight Malware Like Malware: A New Defense Method Against Crypto Ransomware

A Survey of Ransomware as a Service (RaaS) and Methods to Mitigate the Attack

Ransomware Detection and Classification Strategies

A Survey on Windows-based Ransomware Taxonomy and Detection Mechanisms

It's more than just money: The real-world harms from ransomware attacks

A Ransomware Classification Framework Based on File-Deletion and File-Encryption Attack Structures

Ransomware: A Rising Threat of new age Digital Extortion