Ransomware

Ransomware is malicious software that locks you out of your own files. The cybercriminals then demand a ransom in exchange for a decryption key.

How It Works:

• Infection: Malware enters via phishing emails, malicious websites, exploiting outdated software, or compromised Remote Desktop Protocols (RDP).
• Encryption: The ransomware quickly encrypts files on local drives, attached drives, and networked computers.
• Ransom Demand: A pop-up appears demanding payment in cryptocurrency, with no guarantee that paying will actually restore your files.

How to Protect Yourself:

• Back Up Your Data (the single best defense): Implement regular, offline backups. If your backups are disconnected from the network, ransomware cannot reach them.
• Keep Software Updated: Enable automatic updates to patch known vulnerabilities.
• Keep Antivirus Running: Maintain reputable, real-time anti-malware protection.
• Implement Strong Security Practices: Use Multi-Factor Authentication (MFA) and practice the principle of least privilege for user accounts.

What to do if you are hit:

• Isolate the System: Instantly disconnect the infected computer from the internet and network to prevent spreading.
• Do Not Pay the Ransom: Paying funds criminals and does not guarantee file restoration.
• Restore from Backups: Wipe the infected system and restore your clean, offline backup.