
How iPhone defeated blocker
Recently, the first official Kaspersky Lab application for iPhone, Deblocker, has appeared on the App Store . It optimizes the process of contacting the owners of the apple mobile device to the online service Deblocker and allows you to get a free code to remove a blocking banner without paying money to attackers.
What served as the prerequisites for its creation and how can the application be useful to users?
Background:
The fact that ransom-blockers are pretty annoying to Runet users is no secret. The first blocker was recorded in October 2007, and already in 2010, epidemics began one after another. In the hottest month, more than 500 thousand people visited the Deblocker service, 2.3 million views were registered. The background of the issue with examples is outlined in the post , and the evolution of Deblocker is shown in the presentation .

Analysis of statistics showed that up to 6% of calls to the Deblocker service are carried out from mobile devices, which is a fairly high indicator. There is a logical explanation for this: often in a situation where the computer is locked, the telephone is, if not the only, then at least the most efficient way to access the Internet. Recognized users of mobile devices will redirect to the light mobile version of the service: http://sms.kaspersky.ru/ .
The audience of the desktop and mobile versions is somewhat different from each other. It is noteworthy that if the desktop version is visited by about a quarter of Muscovites, then among the users of the mobile version there are more than half. Krasnodar is among the five cities from which the most mobile users come (3% of the total). But among PC users who visited Deblocker, Krasnodar only 1.7%.

Among the operating systems, iOS dominates, Symbian loses its share from month to month, and Android, on the contrary, is gaining:

Recently, users coming to the service from the iPhone are 2.5 times more than those using the iPad for this purpose. However, the depth of view for iPad users, for obvious reasons, is higher.

Since the blockers are actively multiplying and do not intend to subside, among other countermeasures, we decided to create an application for phones, and start with the iPhone, because, as can be seen from the previous two graphs, this device is the most popular among our users.
Why and how it works: The
application helps you find the code to remove the banner blocking the computer without transferring money to ransomware. In addition to the “Unlocking” section, the application includes a brief description of products that may be useful for checking, treating, and subsequently protecting your computer.
The application pulls unlock codes from the Deblocker database, which is replenished as the deactivation codes are extracted from the malware code, generated or cracked, that is, in fact, continuously. Up to 500 blocker variations are caught and sorted daily. The most current blocker screenshots and the latest unlock codes for them appear at the top of the list. That is why unlock codes are downloaded every time again, and are not stored in the cache and do not go with a predefined set in the application. An internet connection is required to download unlock codes. Codes are issued along with screenshots of the blockers in a convenient format:
How it looks :



Information about the means of protection:


The application is compatible with iPhone running iOS 3.2 and higher. Implemented support for Retina Display.
Where to download: For questions, comments and suggestions, please contact deblocker@kaspersky.com Note. The data on which the 2-4 graphs are built was collected using Adobe Discover. Sincerely, Kaspersky Lab’s Web Support Team

What served as the prerequisites for its creation and how can the application be useful to users?
Background:
The fact that ransom-blockers are pretty annoying to Runet users is no secret. The first blocker was recorded in October 2007, and already in 2010, epidemics began one after another. In the hottest month, more than 500 thousand people visited the Deblocker service, 2.3 million views were registered. The background of the issue with examples is outlined in the post , and the evolution of Deblocker is shown in the presentation .

Analysis of statistics showed that up to 6% of calls to the Deblocker service are carried out from mobile devices, which is a fairly high indicator. There is a logical explanation for this: often in a situation where the computer is locked, the telephone is, if not the only, then at least the most efficient way to access the Internet. Recognized users of mobile devices will redirect to the light mobile version of the service: http://sms.kaspersky.ru/ .
The audience of the desktop and mobile versions is somewhat different from each other. It is noteworthy that if the desktop version is visited by about a quarter of Muscovites, then among the users of the mobile version there are more than half. Krasnodar is among the five cities from which the most mobile users come (3% of the total). But among PC users who visited Deblocker, Krasnodar only 1.7%.

Among the operating systems, iOS dominates, Symbian loses its share from month to month, and Android, on the contrary, is gaining:

Recently, users coming to the service from the iPhone are 2.5 times more than those using the iPad for this purpose. However, the depth of view for iPad users, for obvious reasons, is higher.

Since the blockers are actively multiplying and do not intend to subside, among other countermeasures, we decided to create an application for phones, and start with the iPhone, because, as can be seen from the previous two graphs, this device is the most popular among our users.
Why and how it works: The
application helps you find the code to remove the banner blocking the computer without transferring money to ransomware. In addition to the “Unlocking” section, the application includes a brief description of products that may be useful for checking, treating, and subsequently protecting your computer.
The application pulls unlock codes from the Deblocker database, which is replenished as the deactivation codes are extracted from the malware code, generated or cracked, that is, in fact, continuously. Up to 500 blocker variations are caught and sorted daily. The most current blocker screenshots and the latest unlock codes for them appear at the top of the list. That is why unlock codes are downloaded every time again, and are not stored in the cache and do not go with a predefined set in the application. An internet connection is required to download unlock codes. Codes are issued along with screenshots of the blockers in a convenient format:
How it looks :



Information about the means of protection:


The application is compatible with iPhone running iOS 3.2 and higher. Implemented support for Retina Display.
Where to download: For questions, comments and suggestions, please contact deblocker@kaspersky.com Note. The data on which the 2-4 graphs are built was collected using Adobe Discover. Sincerely, Kaspersky Lab’s Web Support Team
