Early Detection of Crypto-Ransomware Pre-encryption Phases: A Review

Crypto-ransomware is a type of malware that captures user data, demanding payment for its release. Its unique aspect lies in its ability to make encrypted files irretrievable, persisting even after the malware is contained. Current research highlights the critical need for advanced methods to identify ransomware before it encrypts data. This overview aims to equip researchers with a thorough understanding of ransomware, including current studies and the importance of developing more sophisticated early detection techniques for stronger cybersecurity. It also points out the extensive research focused on early, pre-encryption detection of ransomware, highlighting the latest advancements, existing methodologies, and their limitations.