From 01894fd118ca991c706e563be14fe83683003bb3 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Fri, 5 Apr 2019 11:26:29 +0200
Subject: [PATCH] ransomware taxonomy : decribe some types

---
 ransomware/machinetag.json | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/ransomware/machinetag.json b/ransomware/machinetag.json
index 83f18b1..55f0b9c 100644
--- a/ransomware/machinetag.json
+++ b/ransomware/machinetag.json
@@ -3,6 +3,9 @@
   "expanded": "ransomware types and elements",
   "description": "Ransomware is used to define ransomware types and the elements that compose them.",
   "version": 1,
+  "refs": [
+    "https://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/the-evolution-of-ransomware.pdf"
+  ],
   "predicates": [
     {
       "value": "type",
@@ -21,15 +24,15 @@
       "entry": [
         {
           "value": "scareware",
-          "expanded": ""
+          "expanded": "Scareware is a form of malware which uses social engineering to cause shock, anxiety, or the perception of a threat in order to manipulate users into buying unwanted software."
         },
         {
-          "value": "locker",
-          "expanded": ""
+          "value": "locker-ransomware",
+          "expanded": "Locker eansomware, also called computer locker, denies access to the computer or device "
         },
         {
-          "value": "cryptolocker",
-          "expanded": ""
+          "value": "crypto-ransomware",
+          "expanded": "Crypto ransomware, also called data locker prevents access to files or data. Crypto ransomware doesn’t necessarily have to use encryption to stop users from accessing their data, but the vast majority of it does."
         }
       ],
     },