Will Ransomware Cell Phone Attacks Reach the U.S.? (And what to do if you get infected)

Standard

 

cell phone attackTwo weeks ago they hit iPhone users in Australia and New Zealand. This week the reports came in that they’d hit Android users in Eastern Europe, specifically Ukraine. We’re watching, waiting to see if-and-when one of them will hit Western Europe and the U.S. — Oleg Pliss and his kin, Simplocker. They’re not people; they are a new round of cell phone viruses, and the difference is that they’re ransomware. Pay them money, or they threaten to hold your contacts, pictures, or even your whole cell phone hostage.

Sound familiar?

No, viruses for cell phones aren’t new. In fact, there’s a whole slew of mobile device virus protection software (Lookout, AVG, Avast, etc.). Trouble is, ransomware is notorious for getting around anti-virus protection.

Early reports indicate that, at least in the case of Ukraine’s Android virus, Simplocker, the level of encryption isn’t as complex as Cryptolocker. That doesn’t make it any less annoying, though. And according to some reports it does no good to try to pay Oleg’s ransom because the payment is linked to a PayPal account that doesn’t exist.

So, being a bit freaked out about this (even though my phone is a Windows platform, which hasn’t yet been affected), I asked my guys, the techs here at Everon, what I should do if my phone were hit by ransomware.

“The best thing you can do is to just wipe your phone,” Jeff Woods, one of our experienced L2s, said.

“And then reload all of your info from your backup,” Frank Lindsey, the L1 Supervisor added.

Um, okaaaay…? I felt like a kindergartener in college. Wipe my phone? And… is it automatically backed up? How do I do that if it’s not?

“Well,” Frank said, “if your cell phone is registered with us, at Everon, you could call and we can do a factory wipe for you. Or most cell phone providers can also do that, if you just call Sprint, AT&T, Verizon, or whomever.”

“Alternately,” James Schaffer, another of our L2s, said, “you could perform your own wipe in your phone’s settings.”

I checked my phone’s settings and couldn’t find where to do this. James told me to go to “Settings” -> “About,” and then click the button that says “Reset Your Phone.” (Of course, this only works if your phone isn’t locked by a virus.)

As far as doing backups, it turns out most phones do have automatic backup features. But iPhones, for instance, have to be plugged into your computer to perform their backups – something many iPhone users never do (they only charge the battery). And then there are the settings on the backup. If you’ve only told it to back up your contacts, you run the risk of losing any pictures you haven’t manually saved. (Or already posted to Facebook.)

There are programs you can use to do your auto-backups, too. Google Drive will automatically backup your mobile data. Dropbox, Picassa, Facebook, and Google+ are other sites that will also perform auto-backups on your data and/or photos if you adjust their settings correctly. (Ah, more settings. Good thing I have tech support here!)

So if your mobile data is all backed up, and you do get infected with something evil that needs last-resort measures, like ransomware, all you have to do is wipe and restore. (One site I found estimated this process would take no more than an hour.) Easy-peasy. If you’ve backed up your data.

Sometimes the best defense is just the ability to recover.

Wolverine