Ransomware: Analysis and Evaluation of Live Forensic Techniques and Impact on Linux-Based IoT Systems

Ransomware has been predominantly a threat to Windows systems. Recently, Linux systems have become interesting for cybercriminals, and this trend is expected to continue. This endangers IoT ecosystems, whereas many IoT systems are based on Linux (e.g. cloud infrastructure and gateways). This paper investigates how currently employed forensic techniques can be applied to Linux ransomware and evaluates the maturity as well as the impact on the system.