Secrets of Safe Work with TrueCrypt and VeraCrypt Cryptocontainers
In this section, we will dedicate an entire chapter to methods of cracking cryptocontainers, discussing how law enforcement, intelligence agencies, and hackers do it. We will also talk about a proven method for gaining access to encrypted storage called thermorectal cryptanalysis, as well as high-tech hacking methods such as forensic analysis of RAM.
The set of measures to prevent the hacking of your cryptocontainer is what we call the rules for the safe use of a cryptocontainer, and in this paragraph, we will introduce the first of them.
You must understand that although a cryptocontainer, when using a strong password and a keyfile, is an impregnable wall for those wishing to crack it, this only applies to unmounted cryptocontainers. When a cryptocontainer is mounted, there is direct access to all files within it. If someone gains access to the computer at that moment, they will gain access to all files of the mounted cryptocontainer. However, there is a solution to any attack; even thermorectal cryptanalysis can be defended against.
Secret 1. Shield Cryptocontainers from Antivirus.
Probably, each of you has heard the story about the conflict between Kaspersky Lab and the United States National Security Agency. The result was a loss of trust in Kaspersky Lab products and their abandonment not only in the USA but also in other countries.
The brief essence is as follows: Kaspersky's antivirus was installed on the computer of a hacker working with the NSA (according to other sources, on the computer of an NSA employee). The antivirus transmitted files containing state secrets from the computer to Kaspersky Lab. This was confirmed by the owner of Kaspersky Lab, Eugene Kaspersky, but the versions diverge thereafter. According to the NSA, these files were transmitted to Russian intelligence agencies, while Kaspersky Lab claims that the data was immediately deleted.