Abstract:Ransomware has appeared to be the most damaging and devastating type of malware attack in any cyber physical system. The resilience of a web browser to deal with the malware attack is of significance importance, however, evaluating the performance of a browser to tackle these attacks is a challenging task. Due to various automation techniques, web applications can be tested without human intervention. Technologies such as Junit, Chakram, and Selenium are useful in automated testing but the problem is that the attacker uses harmful code and automated web approaches to distribute their malware. In this research,our contribution is twofold. Firstly, we examine a new attack vector that cyber adversaries can possibly use in the future to infect an operating system with a malware. Currently, attackers use various techniques to gain access to victims' personal computers. Secondly, we present a novel automated web defence to countermeasure these malware attacks. The proposed research aims to provide a better understanding of the new computer virus-spreading techniques that intruders can use in the future. We provide the insight of these attacks and present ways to countermeasure the attacks and to reduce the attack surface. Experiments and flow diagrams have been used to demonstrate the attack and defence approach. To offer malware lateral movement and to encrypt the date of users' device, we use Selenium automation tool on a social media platform. For our experimentation, we developed an application which has been tested on a variety of browsers including Google Chrome, Firefox, and Safari. Our research has revealed that we have an 85 percent success rate when testing in a head-on environment. We have expanded our experiments on headless applications and interestingly, the accuracy rate improved and the probability of success increased to 95 percent. Lastly, we have demonstrated a unique method for detecting and stopping web automation that is generally applicable.

Fight Malware Like Malware: A New Defense Method Against Crypto Ransomware

Travelling the Hypervisor and SSD: A Tag-Based Approach Against Crypto Ransomware with Fine-Grained Data Recovery

Crypto-Ransomware and Their Defenses: In-depth Behavioral Characterization, Discussion of Deployability, and New Insights

Ransomware Attacks in Cyber-Physical Systems: Countermeasure of Attack Vectors Through Automated Web Defenses

GuardFS: a File System for Integrated Detection and Mitigation of Linux-based Ransomware

A Survey of Crypto Ransomware Attack Detection Methodologies: An Evolving Outlook

Cryptographic ransomware encryption detection: Survey

An Empirical Study of Data Disruption by Ransomware Attacks

MTFS: a Moving Target Defense-Enabled File System for Malware Mitigation

A comprehensive analysis combining structural features for detection of new ransomware families

An exploratory data analysis of malware/ransomware cyberattacks: insights from an extensive cyber loss dataset

Introduction of the ARDS—Anti-Ransomware Defense System Model—Based on the Systematic Review of Worldwide Ransomware Attacks

A Prevention and a Traction System for Ransomware Attacks

Ransomware threat mitigation through network traffic analysis and machine learning techniques

Ransomware Reloaded: Re-examining Its Trend, Research and Mitigation in the Era of Data Exfiltration

A Content-based Ransomware Detection and Backup Solid-State Drive for Ransomware Defense

A Ransomware Classification Framework Based on File-Deletion and File-Encryption Attack Structures

Protecting from Malware Obfuscation Attacks through Adversarial Risk Analysis

A Study on Countermeasures against Neutralizing Technology: Encoding Algorithm-Based Ransomware Detection Methods Using Machine Learning

Software-Defined Networking-based Crypto Ransomware Detection Using HTTP Traffic Characteristics

A Survey on Windows-based Ransomware Taxonomy and Detection Mechanisms