Ransomware
Ransomware is malicious software that locks you out of your own files. The cybercriminals then demand a ransom in exchange for a decryption key.
How It Works:
- Infection: Malware enters via phishing emails, malicious websites, exploiting outdated software, or compromised Remote Desktop Protocols (RDP).
- Encryption: The ransomware quickly encrypts files on local drives, attached drives, and networked computers.
- Ransom Demand: A pop-up appears demanding payment in cryptocurrency, with no guarantee that paying will actually restore your files.
How to Protect Yourself:
- Back Up Your Data (Crucial!): Implement regular, offline backups. If your backups are disconnected from the network, ransomware cannot reach them.
- Keep Software Updated: Enable automatic updates to patch known vulnerabilities.
- Use Robust Antivirus: Maintain reputable, real-time anti-malware protection.
- Implement Strong Security Practices: Use Multi-Factor Authentication (MFA) and practice the principle of least privilege for user accounts.
What to do if you are hit:
- Isolate the System: Instantly disconnect the infected computer from the internet and network to prevent spreading.
- Do Not Pay the Ransom: Paying funds criminals and does not guarantee file restoration.
- Restore from Backups: Wipe the infected system and restore your clean, offline backup.
