New type of Anti-Ransomware program.

Have you heard about this program: Cybereason Ransom Free? It is a military strength Anti-Ransomware program.

Question: I had a e-mail which saíd: Incoming voice-mail from unknown address. Was THAT also some sort of ransomware trick?

Cybereason Ransomfree is program similar to CryptoMonitor by Nathan Scott (which is no longer supported). Both were among the first to utilize trap files and folders...patterns of files and hidden virtual files that ransomware is attracted to. This feature is more commonly referred to as "Entrapment Protection".

I quote Nathan's explanation of Entrapment Protection from his now closed EasySync web site in this topic.

Entrapment Protection
Entrapment Protection lays numerous different types of traps all around your system that a Ransomware Infection cannot resist to touch. These traps send encrypted pattern signals back and forth between CryptoMonitor and themselves constantly. When a Ransomware Infection falls into one of these traps, the pattern is broken and CryptoMonitor immediately takes action. Once this happens, the machine is locked down and you are alerted about the infection and prompted for your decision on what actions to take. During this time, no file modifications are allowed, so your files are safe while you think about your course of action. With this protection enabled you may notice a few hidden files, registry keys, folders, and services running, but don't worry, they are there to protect you!

The use of trap files and folders is not a 100% solution...some data files typically will end up being encrypted by ransomware but whatever helps with prevention, I consider useful.

I keep a running list of ransomware prevention tools (Post #2) in this topic.


Crypto malware and other forms of ransomware spread via a variety of common vectors...opening a malicious or spam email attachment, executing a malcious file, web exploits, exploit kits, malvertising campaigns, non-malware (fileless) attacks:, drive-by downloads and RDP bruteforce attacks against servers especially by those involved with the development and spread of ransomware. Section in this topic explains in more detail the most common methods Crypto malware (file encrypting ransomware) and other forms of ransomware is typically delivered and spread.