--- title: Defray Ransomware Using Personalized Attacks to Net Big Paydays description: Defray ransomware combines ransomware and phishing to target specific businesses using a convincing, customized email to net major paydays. The ransomware campaign is targeted healthcare, education, manufacturing and technology industries and demands $5,000 in Bitcoin to decrypt files. image: https://blog.canauri.com/hubfs/Defray.png --- - [319-383-0165](tel:+1.319-383-0165) - [Free Tools](https://www.getcryptostopper.com/free-tools) - [About](https://www.getcryptostopper.com/about) - [Partners](https://www.getcryptostopper.com/partners) [![CryptoStopper™](https://blog.canauri.com/hubfs/cryptostopper-logo.png)](https://www.getcryptostopper.com/) - [CryptoStopper™](https://www.getcryptostopper.com/cryptostopper/) - [For MSPs](https://www.getcryptostopper.com/cryptostopper-for-msps/) - [Blog](https://blog.getcryptostopper.com/) [Pricing](https://www.getcryptostopper.com/pricing) # Defray Ransomware Using Personalized Attacks to Net Big Paydays September 13, 2018 [Jordan Kadlec](https://blog.canauri.com/author/jordan-kadlec) ![Defray](https://blog.canauri.com/hs-fs/hubfs/Defray.png?width=1270&name=Defray.png) Photo courtesy of ThreatVector.com Defray, a new ransomware variant discovered by Proofpoint, is targeting specific businesses and using convincing, customized email lures designed to net major paydays. The ransomware campaign is believed to be targeting healthcare, education, manufacturing and technology industries and demands $5,000 in Bitcoin to get their files decrypted. How the Defray Ransomware Campaign Works Based on initial investigations, Defray ransomware comes in two forms that we have recently discussed in past articles: Phishing and Business Email Compromise (BEC). What sets Defray apart from typical ‘spray and pray’ ransomware or phishing campaigns is the amount of customization involved in the emails. Each email sent is specifically tailored to the targeted company – referencing specific executives at the organization, including the organization’s logo in the email, and even presenting the emails and attachments in an appropriate context that the recipients at the organization would expect. A recent Defray ransomware attack at a UK-based hospital used the BEC approach and sent a ‘Patient Report’ that looked like it came from the hospital’s Director of IT. In another instance, an email was disguised as a quote from a representative at a major UK-based aquarium. When the attachment is opened and clicked on, an embedded executable drops the Defray payload in the %TMP% folder disguised with a commonly seen name such as taskmgr.exe or explorer.exe. Unlike other very popular forms of ransomware, Defray does not change the name or append extensions to the end of encrypted files. On top of that, Defray deletes volume shadow copies, making it more difficult to recover encrypted files via backups. Once the encryption process is completed, Defray creates ransom notes in each folder that has encrypted files. The ransom note, titled FILES.TXT, provides further indication that the ransomware campaign is targeting businesses rather than individuals. “Don’t panic, read this and contact someone from IT department,” reads the first sentence of the ransom note. The creators of Defray are quite confident in their product, stating: “This is custom developed ransomware, decrypter won’t be made by an antivirus company.” As we mentioned before, the ransom demanded is $5,000 in Bitcoin. It appears the distributors of the ransomware want bigger paydays for the amount of legwork they are putting in. Typically, ransoms are around $1,000. However, those campaigns use the ‘spray and pray’ technique and are trying to infect anyone and everyone. Protect Against Defray Ransomware With companies and their employees becoming more and more aware of cybersecurity risks, we can presume that more ransomware, phishing, or BEC attacks such as Defray are being developed. Like these attacks, our education on cybersecurity risks must become more in-depth. Each time a threat like Defray appears, companies need to instruct their employees to be on the lookout for the types of emails included in the campaign. Considering the amount of personalization involved in making these attacks so successful, however, relying on every single employee to not get fooled into clicking on a malicious link is quite risky. Find out how [WatchPoint](https://www.watchpointdata.com/) can serve as the perfect employee safety net and protect you from these types of cybersecurity risks. ### Share this: - [Tweet](https://twitter.com/share) [Previous Post Cyber Insurance Market Projected to Surpass $22 Billion by 2024](https://blog.canauri.com/cyber-insurance-market-projected-to-surpass-22-billion-by-2024) [Next Post Cybersecurity Jobs in High Demand](https://blog.canauri.com/cybersecurity-jobs-in-high-demand-2) [![Entrepreneur Link](https://blog.canauri.com/hs-fs/hubfs/Watch_Point_Data_December2017_Theme/images/Feature-on-Entrepreneur.com_.png?width=300&height=300&name=Feature-on-Entrepreneur.com_.png)](https://www.entrepreneur.com/article/286698) ### Share [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.canauri.com%2Fdefray-ransomware-using-personalized-attacks-to-net-big-paydays-2%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.canauri.com%2Fdefray-ransomware-using-personalized-attacks-to-net-big-paydays-2%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.canauri.com%2Fdefray-ransomware-using-personalized-attacks-to-net-big-paydays-2%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.canauri.com%2Fdefray-ransomware-using-personalized-attacks-to-net-big-paydays-2%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Defray%20Ransomware%20Using%20Personalized%20Attacks%20to%20Net%20Big%20Paydays) [![Share on Pinterest](https://static.hubspot.com/final/img/common/icons/social/pinterest-24x24.png)](http://pinterest.com/pin/create/button/?url=https%3A%2F%2Fblog.canauri.com%2Fdefray-ransomware-using-personalized-attacks-to-net-big-paydays-2%3Futm_medium%3Dsocial%26utm_source%3Dpinterest&media=) [![Share on Email](https://static.hubspot.com/final/img/common/icons/social/email-24x24.png)](mailto:?subject=Check%20out%20https%3A%2F%2Fblog.canauri.com%2Fdefray-ransomware-using-personalized-attacks-to-net-big-paydays-2%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fblog.canauri.com%2Fdefray-ransomware-using-personalized-attacks-to-net-big-paydays-2%3Futm_medium%3Dsocial%26utm_source%3Demail) ### Subscribe to Email Updates ### Recent Posts ### Posts by Topic - [Cyber Threats (164)](https://blog.canauri.com/topic/cyber-threats) - [Ransomware (91)](https://blog.canauri.com/topic/ransomware) - [Data Breach (68)](https://blog.canauri.com/topic/data-breach) - [Business (49)](https://blog.canauri.com/topic/business) - [Scams (19)](https://blog.canauri.com/topic/scams) - [cybersecurity (14)](https://blog.canauri.com/topic/cybersecurity) - [Cyber Attack (10)](https://blog.canauri.com/topic/cyber-attack) - [Uncategorized (9)](https://blog.canauri.com/topic/uncategorized) - [Breach (8)](https://blog.canauri.com/topic/breach) - [Data (8)](https://blog.canauri.com/topic/data) - [Phishing (7)](https://blog.canauri.com/topic/phishing) - [cyber (5)](https://blog.canauri.com/topic/cyber) - [decrypters (5)](https://blog.canauri.com/topic/decrypters) - [security (5)](https://blog.canauri.com/topic/security) - [Insider (4)](https://blog.canauri.com/topic/insider) - [Ransomware Decrypters (4)](https://blog.canauri.com/topic/ransomware-decrypters) - [cybercrime (4)](https://blog.canauri.com/topic/cybercrime) - [managed service providers (4)](https://blog.canauri.com/topic/managed-service-providers) - [ransom (4)](https://blog.canauri.com/topic/ransom) - [ransomware ransom (4)](https://blog.canauri.com/topic/ransomware-ransom) - [Banking Trojans (3)](https://blog.canauri.com/topic/banking-trojans) - [Firewalls (3)](https://blog.canauri.com/topic/firewalls) - [Press Release (3)](https://blog.canauri.com/topic/press-release) - [Ransomware as a Service (3)](https://blog.canauri.com/topic/ransomware-as-a-service) - [WannaCry (3)](https://blog.canauri.com/topic/wannacry) - [Zero Day Vulnerability (3)](https://blog.canauri.com/topic/zero-day-vulnerability) - [business email compromise (3)](https://blog.canauri.com/topic/business-email-compromise) - [cyber security (3)](https://blog.canauri.com/topic/cyber-security) - [decryptors (3)](https://blog.canauri.com/topic/decryptors) - [ransomware attack (3)](https://blog.canauri.com/topic/ransomware-attack) - [BlueKeep (2)](https://blog.canauri.com/topic/bluekeep) - [CEO fraud (2)](https://blog.canauri.com/topic/ceo-fraud) - [COVID-19 (2)](https://blog.canauri.com/topic/covid-19) - [COVID-19 cybersecurity (2)](https://blog.canauri.com/topic/covid-19-cybersecurity) - [Cyberattack (2)](https://blog.canauri.com/topic/cyberattack) - [Fileless (2)](https://blog.canauri.com/topic/fileless) - [Fileless Malware (2)](https://blog.canauri.com/topic/fileless-malware) - [Fileless Ransomare (2)](https://blog.canauri.com/topic/fileless-ransomare) - [Fortnite vulnerability (2)](https://blog.canauri.com/topic/fortnite-vulnerability) - [MSPs (2)](https://blog.canauri.com/topic/msps) - [Patch (2)](https://blog.canauri.com/topic/patch) - [Small and Medium Enterprises Cybersecurity (2)](https://blog.canauri.com/topic/small-and-medium-enterprises-cybersecurity) - [Spear Phishing (2)](https://blog.canauri.com/topic/spear-phishing) - [WFH (2)](https://blog.canauri.com/topic/wfh) - [Wi-Fi Connections (2)](https://blog.canauri.com/topic/wi-fi-connections) - [Zero Day (2)](https://blog.canauri.com/topic/zero-day) - [Zero Day Attacks (2)](https://blog.canauri.com/topic/zero-day-attacks) - [bitcoin (2)](https://blog.canauri.com/topic/bitcoin) - [bitcoins (2)](https://blog.canauri.com/topic/bitcoins) - [cryptocurrency (2)](https://blog.canauri.com/topic/cryptocurrency) - [cryptocurrency mining (2)](https://blog.canauri.com/topic/cryptocurrency-mining) - [cryptojacking (2)](https://blog.canauri.com/topic/cryptojacking) - [cyber attacks on hospitals (2)](https://blog.canauri.com/topic/cyber-attacks-on-hospitals) - [cybersecurity jobs (2)](https://blog.canauri.com/topic/cybersecurity-jobs) - [defray (2)](https://blog.canauri.com/topic/defray) - [defray ransomware (2)](https://blog.canauri.com/topic/defray-ransomware) - [fortnite (2)](https://blog.canauri.com/topic/fortnite) - [gandcrab ransomware (2)](https://blog.canauri.com/topic/gandcrab-ransomware) - [hacking (2)](https://blog.canauri.com/topic/hacking) - [health (2)](https://blog.canauri.com/topic/health) - [healthcare (2)](https://blog.canauri.com/topic/healthcare) - [hospital cybersecurity (2)](https://blog.canauri.com/topic/hospital-cybersecurity) - [mac malware (2)](https://blog.canauri.com/topic/mac-malware) - [municipalities cyberattack (2)](https://blog.canauri.com/topic/municipalities-cyberattack) - [municipalities ransomware (2)](https://blog.canauri.com/topic/municipalities-ransomware) - [passwords (2)](https://blog.canauri.com/topic/passwords) - [ransomware attacks (2)](https://blog.canauri.com/topic/ransomware-attacks) - [ransomware normal (2)](https://blog.canauri.com/topic/ransomware-normal) - [scareware (2)](https://blog.canauri.com/topic/scareware) - [two-factor authentication (2)](https://blog.canauri.com/topic/two-factor-authentication) - [2018 cybersecurity (1)](https://blog.canauri.com/topic/2018-cybersecurity) - [2018 cybersecurity review (1)](https://blog.canauri.com/topic/2018-cybersecurity-review) - [2019 cybersecurity predictions (1)](https://blog.canauri.com/topic/2019-cybersecurity-predictions) - [2019 predictions (1)](https://blog.canauri.com/topic/2019-predictions) - [2020 Cybersecurity Predictions (1)](https://blog.canauri.com/topic/2020-cybersecurity-predictions) - [2FA (1)](https://blog.canauri.com/topic/2fa) - [Arizona (1)](https://blog.canauri.com/topic/arizona) - [Arizona beverages ransomware (1)](https://blog.canauri.com/topic/arizona-beverages-ransomware) - [BEC (1)](https://blog.canauri.com/topic/bec) - [BEC Attacks (1)](https://blog.canauri.com/topic/bec-attacks) - [BitPaymer (1)](https://blog.canauri.com/topic/bitpaymer) - [BlueKeep Exploit (1)](https://blog.canauri.com/topic/bluekeep-exploit) - [BlueKeep Vulnerability (1)](https://blog.canauri.com/topic/bluekeep-vulnerability) - [CISO (1)](https://blog.canauri.com/topic/ciso) - [Chief Information Security Officer (1)](https://blog.canauri.com/topic/chief-information-security-officer) - [Coronavirus (1)](https://blog.canauri.com/topic/coronavirus) - [Coronavirus scams (1)](https://blog.canauri.com/topic/coronavirus-scams) - [CryptoMix (1)](https://blog.canauri.com/topic/cryptomix) - [Cyber Liability Insurance (1)](https://blog.canauri.com/topic/cyber-liability-insurance) - [DLL (1)](https://blog.canauri.com/topic/dll) - [DLL CryptoMix (1)](https://blog.canauri.com/topic/dll-cryptomix) - [Data Leak (1)](https://blog.canauri.com/topic/data-leak) - [Deepfakes (1)](https://blog.canauri.com/topic/deepfakes) - [Dridex (1)](https://blog.canauri.com/topic/dridex) - [ERP (1)](https://blog.canauri.com/topic/erp) - [ERP Systems (1)](https://blog.canauri.com/topic/erp-systems) - [Enterprise Resource Planning (1)](https://blog.canauri.com/topic/enterprise-resource-planning) - [Exactis (1)](https://blog.canauri.com/topic/exactis) - [FIFA (1)](https://blog.canauri.com/topic/fifa) - [Fortnite ransomware (1)](https://blog.canauri.com/topic/fortnite-ransomware) - [GandCrab (1)](https://blog.canauri.com/topic/gandcrab) - [Google (1)](https://blog.canauri.com/topic/google) - [Have I been pwned (1)](https://blog.canauri.com/topic/have-i-been-pwned) - [Hospitals Ransomware (1)](https://blog.canauri.com/topic/hospitals-ransomware) - [Kirk (1)](https://blog.canauri.com/topic/kirk) - [Kirk Ransomware (1)](https://blog.canauri.com/topic/kirk-ransomware) - [LockBit (1)](https://blog.canauri.com/topic/lockbit) - [LockerGoga (1)](https://blog.canauri.com/topic/lockergoga) - [LockerGoga Ransomware (1)](https://blog.canauri.com/topic/lockergoga-ransomware) - [M&A (1)](https://blog.canauri.com/topic/ma) - [Malware (1)](https://blog.canauri.com/topic/malware) - [Marriott data breach (1)](https://blog.canauri.com/topic/marriott-data-breach) - [NASA (1)](https://blog.canauri.com/topic/nasa) - [NASA Data Breach (1)](https://blog.canauri.com/topic/nasa-data-breach) - [NCSAM (1)](https://blog.canauri.com/topic/ncsam) - [National Cyber Security Awareness Month (1)](https://blog.canauri.com/topic/national-cyber-security-awareness-month) - [Norsk (1)](https://blog.canauri.com/topic/norsk) - [Norsk Hydro (1)](https://blog.canauri.com/topic/norsk-hydro) - [PGA (1)](https://blog.canauri.com/topic/pga) - [Patch Tuesday (1)](https://blog.canauri.com/topic/patch-tuesday) - [Petya (1)](https://blog.canauri.com/topic/petya) - [Petya Ransomware (1)](https://blog.canauri.com/topic/petya-ransomware) - [Quora data breach (1)](https://blog.canauri.com/topic/quora-data-breach) - [RDP (1)](https://blog.canauri.com/topic/rdp) - [Remote Desktop Protocol (1)](https://blog.canauri.com/topic/remote-desktop-protocol) - [Remote workforce (1)](https://blog.canauri.com/topic/remote-workforce) - [RobbinHood Ransomware (1)](https://blog.canauri.com/topic/robbinhood-ransomware) - [Robbinhood (1)](https://blog.canauri.com/topic/robbinhood) - [SEC (1)](https://blog.canauri.com/topic/sec) - [SME (1)](https://blog.canauri.com/topic/sme) - [SME Cybersecurity (1)](https://blog.canauri.com/topic/sme-cybersecurity) - [SamSam (1)](https://blog.canauri.com/topic/samsam) - [SamSam Ransomware (1)](https://blog.canauri.com/topic/samsam-ransomware) - [Security Breach Notification Laws (1)](https://blog.canauri.com/topic/security-breach-notification-laws) - [Small and Medium Enterprises (1)](https://blog.canauri.com/topic/small-and-medium-enterprises) - [Sorebrect (1)](https://blog.canauri.com/topic/sorebrect) - [Star Trek (1)](https://blog.canauri.com/topic/star-trek) - [Syrk ransomware (1)](https://blog.canauri.com/topic/syrk-ransomware) - [Target (1)](https://blog.canauri.com/topic/target) - [Vidar (1)](https://blog.canauri.com/topic/vidar) - [Vidar infostealer (1)](https://blog.canauri.com/topic/vidar-infostealer) - [Vidar trojan (1)](https://blog.canauri.com/topic/vidar-trojan) - [WCry (1)](https://blog.canauri.com/topic/wcry) - [Wana Decryptor (1)](https://blog.canauri.com/topic/wana-decryptor) - [WanaCry (1)](https://blog.canauri.com/topic/wanacry) - [WanaDecryptor (1)](https://blog.canauri.com/topic/wanadecryptor) - [WannaCry 2.0 (1)](https://blog.canauri.com/topic/wannacry-2-0) - [World Cup (1)](https://blog.canauri.com/topic/world-cup) - [Yahoo (1)](https://blog.canauri.com/topic/yahoo) - [Yahoo Data Breach (1)](https://blog.canauri.com/topic/yahoo-data-breach) - [anatova (1)](https://blog.canauri.com/topic/anatova) - [anatova ransomware (1)](https://blog.canauri.com/topic/anatova-ransomware) - [arizona beverages (1)](https://blog.canauri.com/topic/arizona-beverages) - [atlanta (1)](https://blog.canauri.com/topic/atlanta) - [automobile (1)](https://blog.canauri.com/topic/automobile) - [automobile hacking (1)](https://blog.canauri.com/topic/automobile-hacking) - [azorult trojan (1)](https://blog.canauri.com/topic/azorult-trojan) - [banking trojan (1)](https://blog.canauri.com/topic/banking-trojan) - [bentley (1)](https://blog.canauri.com/topic/bentley) - [bitpaymer ransomware (1)](https://blog.canauri.com/topic/bitpaymer-ransomware) - [blackmail (1)](https://blog.canauri.com/topic/blackmail) - [budgeting (1)](https://blog.canauri.com/topic/budgeting) - [capital one (1)](https://blog.canauri.com/topic/capital-one) - [capital one data breach (1)](https://blog.canauri.com/topic/capital-one-data-breach) - [car hacking (1)](https://blog.canauri.com/topic/car-hacking) - [care (1)](https://blog.canauri.com/topic/care) - [chicago tribune (1)](https://blog.canauri.com/topic/chicago-tribune) - [collection (1)](https://blog.canauri.com/topic/collection) - [collection 1 (1)](https://blog.canauri.com/topic/collection-1) - [coronavirus cybersecurity (1)](https://blog.canauri.com/topic/coronavirus-cybersecurity) - [coronavirus phishing (1)](https://blog.canauri.com/topic/coronavirus-phishing) - [coronavirus ransomware (1)](https://blog.canauri.com/topic/coronavirus-ransomware) - [crypto (1)](https://blog.canauri.com/topic/crypto) - [crytocurrency hack (1)](https://blog.canauri.com/topic/crytocurrency-hack) - [currency (1)](https://blog.canauri.com/topic/currency) - [cyber insurance (1)](https://blog.canauri.com/topic/cyber-insurance) - [cybersecurity budgeting (1)](https://blog.canauri.com/topic/cybersecurity-budgeting) - [cybersecurity coronavirus (1)](https://blog.canauri.com/topic/cybersecurity-coronavirus) - [cybersecurity predictions (1)](https://blog.canauri.com/topic/cybersecurity-predictions) - [cybersecurity ventures (1)](https://blog.canauri.com/topic/cybersecurity-ventures) - [cybersecurity working remotely (1)](https://blog.canauri.com/topic/cybersecurity-working-remotely) - [dharma (1)](https://blog.canauri.com/topic/dharma) - [dharma ransomware (1)](https://blog.canauri.com/topic/dharma-ransomware) - [financial services (1)](https://blog.canauri.com/topic/financial-services) - [financial services data breach (1)](https://blog.canauri.com/topic/financial-services-data-breach) - [government cyberattack (1)](https://blog.canauri.com/topic/government-cyberattack) - [holiday shopping (1)](https://blog.canauri.com/topic/holiday-shopping) - [hospitals hit with ransomware (1)](https://blog.canauri.com/topic/hospitals-hit-with-ransomware) - [iEncrypt (1)](https://blog.canauri.com/topic/iencrypt) - [insider trading (1)](https://blog.canauri.com/topic/insider-trading) - [insurance (1)](https://blog.canauri.com/topic/insurance) - [laundering (1)](https://blog.canauri.com/topic/laundering) - [leak (1)](https://blog.canauri.com/topic/leak) - [los angeles times (1)](https://blog.canauri.com/topic/los-angeles-times) - [man in the disk (1)](https://blog.canauri.com/topic/man-in-the-disk) - [man in the disk attacks (1)](https://blog.canauri.com/topic/man-in-the-disk-attacks) - [maritime cybersecurity (1)](https://blog.canauri.com/topic/maritime-cybersecurity) - [maze ransomware (1)](https://blog.canauri.com/topic/maze-ransomware) - [pensacola florida (1)](https://blog.canauri.com/topic/pensacola-florida) - [phobos (1)](https://blog.canauri.com/topic/phobos) - [phobos ransomware (1)](https://blog.canauri.com/topic/phobos-ransomware) - [quarter 1 2019 ransomware (1)](https://blog.canauri.com/topic/quarter-1-2019-ransomware) - [raccoon stealer (1)](https://blog.canauri.com/topic/raccoon-stealer) - [ransomware data breaches (1)](https://blog.canauri.com/topic/ransomware-data-breaches) - [ransomware defined (1)](https://blog.canauri.com/topic/ransomware-defined) - [ransomware epidemic (1)](https://blog.canauri.com/topic/ransomware-epidemic) - [ransomware hits municipalities (1)](https://blog.canauri.com/topic/ransomware-hits-municipalities) - [ransomware statistics (1)](https://blog.canauri.com/topic/ransomware-statistics) - [riviera beach ransomware attack (1)](https://blog.canauri.com/topic/riviera-beach-ransomware-attack) - [ryuk (1)](https://blog.canauri.com/topic/ryuk) - [ryuk ransomware (1)](https://blog.canauri.com/topic/ryuk-ransomware) - [scammers (1)](https://blog.canauri.com/topic/scammers) - [scams targeting holiday shoppers (1)](https://blog.canauri.com/topic/scams-targeting-holiday-shoppers) - [securities and exchange commission (1)](https://blog.canauri.com/topic/securities-and-exchange-commission) - [sextortion (1)](https://blog.canauri.com/topic/sextortion) - [shipping industry (1)](https://blog.canauri.com/topic/shipping-industry) - [snake ransomware (1)](https://blog.canauri.com/topic/snake-ransomware) - [social engineering (1)](https://blog.canauri.com/topic/social-engineering) - [southwire (1)](https://blog.canauri.com/topic/southwire) - [stop paying the ransom (1)](https://blog.canauri.com/topic/stop-paying-the-ransom) - [tips for working remotely (1)](https://blog.canauri.com/topic/tips-for-working-remotely) - [tribune (1)](https://blog.canauri.com/topic/tribune) - [ursnif (1)](https://blog.canauri.com/topic/ursnif) - [wall street journal (1)](https://blog.canauri.com/topic/wall-street-journal) - [what is ransomware (1)](https://blog.canauri.com/topic/what-is-ransomware) - [working from home (1)](https://blog.canauri.com/topic/working-from-home) - [working remotely (1)](https://blog.canauri.com/topic/working-remotely) see all ##### Contact [415 12th Ave SE, Suite 201 Cedar Rapids, IA 52401](https://www.google.com/maps/place/415+12th+Ave+SE+%23201,+Cedar+Rapids,+IA+52401/@41.9710436,-91.6582952,17z/data=!3m1!4b1!4m5!3m4!1s0x87e4f73f67891f6d:0x38f71e45a9fa7c1f!8m2!3d41.9710436!4d-91.6561065) [319-383-0165](tel:319-383-0165) [support@getcryptostopper.com](mailto:support@getcryptostopper.com) Facebook Twitter Linkedin YouTube - Products - [CryptoStopper™](https://www.getcryptostopper.com/cryptostopper/) - [Endpoint Security](https://www.getcryptostopper.com/tools/endpoint-security/) - Free Tools - [Ransomware Simulator](https://www.getcryptostopper.com/ransomware-simulator/) - [Network Tools](https://www.getcryptostopper.com/free-network-tools/) - [Ransomware Decryptors](https://www.getcryptostopper.com/ransomware-decryptors/) - Company - [About](https://www.getcryptostopper.com/about/) - [Careers](https://www.getcryptostopper.com/careers/) - [Contact](https://www.getcryptostopper.com/contact/) © Copyright WatchPoint Data, All Rights Reserved   |   [Terms](https://www.getcryptostopper.com/terms)