ESET is strengthening its defenses against ransomware and has added Ransomware Shield, another layer protection, to its already existent protection technologies (Cloud Malware Protection System, Network Attack Protection and DNA detections).
The feature is available for ESET home user security products for OS Windows.
The functionality of Ransomware Shield comprises monitoring and evaluation of all executed applications using behavioural heuristics and, actively, blocks known behaviours that resemble ransomware. In addition, Ransowmare Shield can also block modifications to existing files (i.e. their encryption).
Ransomware Shield is active by default, and no special attention needs to be paid by the user to maintain protection until a detection is made. In that case, the user will be prompted to approve/deny a blocking action.
Ransomware is a specific malware family that targets user’s files. The most typical type, filecoders, encrypt data and demand a ransom to regain access to them – the main attack vectors are email attachment and exploit kits.