I'm not sure about how the file system management really works, but I think your cenario is only true if the ransonware creates all encrypted copies and THEN delete all original files.
Because if each original is deleted after the encrypted copy is created, how are you so sure that the file management routines are NOT going to use the recently freed sectors to store the new file? On a spinning disk?
Brazil?
Not all. I have a Bradesco personal ("Pessoa Física") account, java is disabled on my browser and I use Internet Banking normally.
As of now, Bradesco is the second largest private bank in Brazil.
I think the problem is mostly with the state owned banks.
Slashdot Mirror
I'm not sure about how the file system management really works, but I think your cenario is only true if the ransonware creates all encrypted copies and THEN delete all original files. Because if each original is deleted after the encrypted copy is created, how are you so sure that the file management routines are NOT going to use the recently freed sectors to store the new file? On a spinning disk?
Brazil? Not all. I have a Bradesco personal ("Pessoa Física") account, java is disabled on my browser and I use Internet Banking normally. As of now, Bradesco is the second largest private bank in Brazil. I think the problem is mostly with the state owned banks.