Browse Definitions :
Definition

doxware (extortionware)

Contributor(s): Ivy Wigmore

Doxware, also known as extortionware, is a software used for an exploit in which a hacker accesses the target's sensitive data and threatens to publish it if the victim does not meet his demands, which are typically for money. The term comes from doxing, hacker-speak that means accessing and publishing private information about an individual or an organization.

Doxware is a variation on ransomware, malware used to access the target's data and then make it impossible for the victim to access that data himself.    Ransomware has become less profitable as more organizations have realized the importance of backing up their data to prevent loss and meet compliance and data governance requirements.

Doxing usually involves researching a target, accessing the target’s data and publishing it. In contrast, doxware uses the ransomware technique of broad-scale phishing attacks. However, doxware attackers take a further step, exfiltrating the data and exploring it to find potential doxing targets. As with ransomware, the hacker typically encrypts the victim’s data and demands payment to relinquish the key, in addition to refraining from broadcasting the sensitive data.

Although the terms doxware and extortionware are used synonymously, a distinction can be made between the two. As in conventional ransom, ransomware takes a hostage (data, in the case of the malware), while extortionware threatens harm of some sort if demands are unmet. In the case of doxware, the type of harm is specified: Exposure of personal data.

This was last updated in January 2017

Continue Reading About doxware (extortionware)

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

  • Whistleblower Protection Act

    The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from ...

  • smart contract

    A smart contract, also known as a cryptocontract, is a computer program that directly controls the transfer of digital currencies...

  • risk map (risk heat map)

    A risk map, also known as a risk heat map, is a data visualization tool for communicating specific risks an organization faces. A...

SearchSecurity

  • buffer underflow

    Buffer underflow, also known as buffer underrun or buffer underwrite, is a threat to data that typically occurs when the ...

  • digital signature

    A digital signature is a mathematical technique used to validate the authenticity and integrity of a message, software or digital...

  • denial-of-service attack

    A denial-of-service attack is a security event that occurs when an attacker prevents legitimate users from accessing specific ...

SearchHealthIT

SearchDisasterRecovery

  • virtual disaster recovery

    Virtual disaster recovery is a type of DR that typically involves replication and allows a user to fail over to virtualized ...

  • tabletop exercise (TTX)

    A tabletop exercise (TTX) is a disaster preparedness activity that takes participants through the process of dealing with a ...

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a data center.

SearchStorage

  • secondary storage

    Secondary storage is storage for noncritical data that does not need to be frequently accessed.

  • Pure Storage

    Pure Storage is a provider of enterprise data flash storage solutions designed to substitute for electromechanical disk arrays.

  • yobibyte (YiB)

    A yobibyte (YiB) is a unit of measure used to describe data capacity as part of the binary system of measuring computing and ...

Close