The whole new Gpcode outbreak has set me thinking about attackers and victims in general. Yes, decrypting the key used by the new Gpcode is a thorny problem and there’s no guarantee of success. So I’d like to remind everyone that common sense is as improtant as good technology.
Passivity on the part of victims gives cyber-attackers free rein. If you’ve lost your data to Gpcode and are desperate to recover it…even if you give in and rush to purchase an egold account, you can still help stop whoever’s behind this. Don’t just send the PIN code to the blackmailers. Send a copy to the support service of the e-payment system you are using. This will help the investigators track the criminal. And tracking the criminal means s/he might even be caught red-handed.
On the other hand, victims failing to take any action guarantees that the criminal will never be caught – which means there will be new victims – or the same victims will suffer again…and again…and again.
Final thought – I hope that a fourth post on this subject isn’t misleading anyone. There is no Gpcode epidemic; we’ve seen a limited number of infections to date.
However, technical threats aside, it’s user awareness that continues to be a global issue. Stop being a victim, back up your data and take my comments above in context of Gpcode’s history. And then review your own information security in this context as well.