{"id":3793,"date":"2012-11-16T12:08:00","date_gmt":"2012-11-16T12:08:00","guid":{"rendered":"https:\/\/www.techopedia.com\/definition\/ransomware\/"},"modified":"2024-10-03T16:46:31","modified_gmt":"2024-10-03T16:46:31","slug":"ransomware","status":"publish","type":"definition","link":"https:\/\/www.techopedia.com\/definition\/ransomware","title":{"rendered":"Ransomware"},"content":{"rendered":"<h2><span id=\"what_is_ransomware\">What is Ransomware?<\/span><\/h2>\n<p>There are many types of <a href=\"https:\/\/www.techopedia.com\/definition\/4015\/malicious-software-malware\">malware<\/a> floating around \u2013 one being ransomware. Ransomware is a malware that <a href=\"https:\/\/www.techopedia.com\/definition\/5507\/encryption\">encrypts<\/a> all the <a href=\"https:\/\/www.techopedia.com\/definition\/7199\/file\">files<\/a> on your <a href=\"https:\/\/www.techopedia.com\/definition\/5140\/workstation-ws\">workstations<\/a> and <a href=\"https:\/\/www.techopedia.com\/definition\/2282\/server\">servers<\/a>. Without access to your files, your business is dead in the water.<\/p>\n<p>To regain access, you must pay a ransom to obtain the digital <a href=\"https:\/\/www.techopedia.com\/definition\/1773\/decryption\">decryption<\/a> key. It&#8217;s a devastating <a href=\"https:\/\/www.techopedia.com\/definition\/24748\/cyberattack\">cyberattack<\/a> that can threaten the viability of your business.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-300x143.jpg\" alt=\"What is Ransomware\" width=\"1200\" height=\"571\" class=\"aligncenter wp-image-325897\" srcset=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-300x143.jpg 300w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-1024x487.jpg 1024w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-768x365.jpg 768w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-130x63.jpg 130w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-104x50.jpg 104w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-83x40.jpg 83w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-1536x731.jpg 1536w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-1200x571.jpg 1200w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware-1980x942.jpg 1980w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/What-is-Ransomware.jpg 2048w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<div class=\"su-note\"  style=\"border-color:#dddddd;border-radius:3px;-moz-border-radius:3px;-webkit-border-radius:3px;\"><div class=\"su-note-inner su-u-clearfix su-u-trim\" style=\"background-color:#f7f7f7;border-color:#ffffff;color:#333333;border-radius:3px;-moz-border-radius:3px;-webkit-border-radius:3px;\">\n<h2><span id=\"key_takeaways\">Key Takeaways<\/span><\/h2>\n<ul>\n<li>Ransomware is a type of malware that locks files by encrypting them, and you can&#8217;t access them until you pay for a decryption key.<\/li>\n<li>It spreads through illegal downloads, phishing emails, or by exploiting system weaknesses like Remote Desktop Protocol.<\/li>\n<li>Ransomware comes in various forms: scareware (fake warnings), screen lockers (which block device access), and encryption ransomware (which locks your files).<\/li>\n<li>Ransomware can severely disrupt business operations, leading to major financial losses and often taking weeks to recover from.<\/li>\n<li>To protect against ransomware, it&#8217;s crucial to keep systems updated, restrict administrative privileges, use anti-malware software, back up data regularly, and have a solid recovery and incident response plan.<\/li>\n<\/ul>\n<\/div><\/div>\n<div>\n    <section class=\"toc-sticky w-100 bg-white \">\n        <div class=\"toc-sticky__container container\">\n            <div class=\"toc-sticky__open d-flex align-items-end\" data-bs-toggle=\"collapse\"\n                 aria-controls=\"multiCollapse1\"\n                 data-bs-target=\"#multiCollapse1\">\n                <button\n                        class=\"btn btn-primary collapse-action-btn p-1 rounded-circle\"\n                        type=\"button\"\n                >\n                    <i class=\"icon-chevron-up\"><\/i>\n                <\/button>\n                <span id=\"toc-current-title\" class=\"d-flex align-items-center\">\n                    Table of Contents\n                <\/span>\n                <span class=\"toc-main-title-permanent\">Table of Contents<\/span>\n            <\/div>\n            <div\n                    class=\"collapse my-3\"\n                    id=\"multiCollapse1\"\n            >\n                <ol class=\"StepProgress\">\n                                                                        <li class=\"StepProgress-item current\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"what_is_ransomware\"\n                               onclick=handleScrollToTitle(\"what_is_ransomware\")\n                               class=\"StepProgress-item__link\" data-level=\"2\">What is Ransomware?<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                                                        <li class=\"StepProgress-item\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"key_takeaways\"\n                               onclick=handleScrollToTitle(\"key_takeaways\")\n                               class=\"StepProgress-item__link\" data-level=\"2\">Key Takeaways<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                                                        <li class=\"StepProgress-item\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"how_ransomware_infects_your_systems\"\n                               onclick=handleScrollToTitle(\"how_ransomware_infects_your_systems\")\n                               class=\"StepProgress-item__link\" data-level=\"2\">How Ransomware Infects Your Systems<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                                                        <li class=\"StepProgress-item\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"the_size_of_the_problem\"\n                               onclick=handleScrollToTitle(\"the_size_of_the_problem\")\n                               class=\"StepProgress-item__link\" data-level=\"2\">The Size of the Problem<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                                                        <li class=\"StepProgress-item\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"what_does_ransomware_do\"\n                               onclick=handleScrollToTitle(\"what_does_ransomware_do\")\n                               class=\"StepProgress-item__link\" data-level=\"2\">What Does Ransomware Do?<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                                                        <li class=\"StepProgress-item\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"how_to_protect_yourself_against_ransomware\"\n                               onclick=handleScrollToTitle(\"how_to_protect_yourself_against_ransomware\")\n                               class=\"StepProgress-item__link\" data-level=\"2\">How to Protect Yourself Against Ransomware<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                                                        <li class=\"StepProgress-item\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"the_bottom_line\"\n                               onclick=handleScrollToTitle(\"the_bottom_line\")\n                               class=\"StepProgress-item__link\" data-level=\"2\">The Bottom Line<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                                                        <li class=\"StepProgress-item\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"faqs\"\n                               onclick=handleScrollToTitle(\"faqs\")\n                               class=\"StepProgress-item__link\" data-level=\"2\">FAQs<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                                                        <li class=\"StepProgress-item\">\n                                                <div class=\"StepProgress-item__group\">\n                            <a data-id=\"references\"\n                               onclick=handleScrollToTitle(\"references\")\n                               class=\"StepProgress-item__link\" data-level=\"2\">References<\/a>\n                                                    <\/div>\n                                                <\/li>\n                                    <\/ol>\n                <div class=\"toc-sticky__container__disperse\"><\/div>\n                <div class=\"toc-sticky__btn-top justify-content-center\">\n                    <button class=\"btn btn-link d-flex align-items-center\" onclick={btnTop()}><p>Show Full Guide<\/p><img decoding=\"async\"\n                                src=\"\/wp-content\/plugins\/table-of-contents\/assets\/images\/arrow-up-circle.svg\"\n                                alt=\"arrow-up-circle\">\n                    <\/button>\n                <\/div>\n            <\/div>\n        <\/div>\n    <\/section>\n    <div class=\"toc-sticky-list\">\n        <div class=\"toc-sticky__container container\">\n            <div class=\"toc-sticky__open d-flex align-items-end\" data-bs-toggle=\"collapse\" aria-controls=\"multiCollapse2\" data-bs-target=\"#multiCollapse2\">\n                <button class=\"btn btn-primary collapse-action-btn p-1 rounded-circle\"\n                        type=\"button\">\n                    <i class=\"icon-chevron-up up\"><\/i>\n                <\/button>\n                <span id=\"toc-current-title\" class=\"d-flex align-items-center\">\n                    Table of Contents\n                <\/span>\n            <\/div>\n            <div  class=\"collapse my-3\" id=\"multiCollapse2\">\n                <ol class=\"StepProgress\">\n                    \t\t\t\t\t \t\t\t\t\t                                                     <li class=\"StepProgress-item current \">\n                                                    <div class=\"StepProgress-item__group\">\n                                <a data-id=\"what_is_ransomware\"\n                                   onclick=handleScrollToTitle(\"what_is_ransomware\")\n                                   class=\"StepProgress-item__link\"\n                                   data-level=\"2\">What is Ransomware?<\/a>\n                                                            <\/div>\n                                                    <\/li>\n                    \t\t\t\t\t \t\t\t\t\t                                                     <li class=\"StepProgress-item \">\n                                                    <div class=\"StepProgress-item__group\">\n                                <a data-id=\"key_takeaways\"\n                                   onclick=handleScrollToTitle(\"key_takeaways\")\n                                   class=\"StepProgress-item__link\"\n                                   data-level=\"2\">Key Takeaways<\/a>\n                                                            <\/div>\n                                                    <\/li>\n                    \t\t\t\t\t \t\t\t\t\t                                                     <li class=\"StepProgress-item \">\n                                                    <div class=\"StepProgress-item__group\">\n                                <a data-id=\"how_ransomware_infects_your_systems\"\n                                   onclick=handleScrollToTitle(\"how_ransomware_infects_your_systems\")\n                                   class=\"StepProgress-item__link\"\n                                   data-level=\"2\">How Ransomware Infects Your Systems<\/a>\n                                                            <\/div>\n                                                    <\/li>\n                    \t\t\t\t\t \t\t\t\t\t\n\t\t\t\t\t\t <span class=\"show_moretoc\">Show Full Guide<\/span>\n\t\t\t\t\t\t \t\t\t\t\t \t\t\t\t\t\t  \t\t\t\t\t                                                      <li class=\"StepProgress-item ms_hidetoc\">\n                                                    <div class=\"StepProgress-item__group\">\n                                <a data-id=\"the_size_of_the_problem\"\n                                   onclick=handleScrollToTitle(\"the_size_of_the_problem\")\n                                   class=\"StepProgress-item__link\"\n                                   data-level=\"2\">The Size of the Problem<\/a>\n                                                            <\/div>\n                                                    <\/li>\n                    \t\t\t\t\t \t\t\t\t\t \t\t\t\t\t\t  \t\t\t\t\t                                                      <li class=\"StepProgress-item ms_hidetoc\">\n                                                    <div class=\"StepProgress-item__group\">\n                                <a data-id=\"what_does_ransomware_do\"\n                                   onclick=handleScrollToTitle(\"what_does_ransomware_do\")\n                                   class=\"StepProgress-item__link\"\n                                   data-level=\"2\">What Does Ransomware Do?<\/a>\n                                                            <\/div>\n                                                    <\/li>\n                    \t\t\t\t\t \t\t\t\t\t \t\t\t\t\t\t  \t\t\t\t\t                                                      <li class=\"StepProgress-item ms_hidetoc\">\n                                                    <div class=\"StepProgress-item__group\">\n                                <a data-id=\"how_to_protect_yourself_against_ransomware\"\n                                   onclick=handleScrollToTitle(\"how_to_protect_yourself_against_ransomware\")\n                                   class=\"StepProgress-item__link\"\n                                   data-level=\"2\">How to Protect Yourself Against Ransomware<\/a>\n                                                            <\/div>\n                                                    <\/li>\n                    \t\t\t\t\t \t\t\t\t\t \t\t\t\t\t\t  \t\t\t\t\t                                                      <li class=\"StepProgress-item ms_hidetoc\">\n                                                    <div class=\"StepProgress-item__group\">\n                                <a data-id=\"the_bottom_line\"\n                                   onclick=handleScrollToTitle(\"the_bottom_line\")\n                                   class=\"StepProgress-item__link\"\n                                   data-level=\"2\">The Bottom Line<\/a>\n                                                            <\/div>\n                                                    <\/li>\n                    \t\t\t\t\t \t\t\t\t\t \t\t\t\t\t\t  \t\t\t\t\t                                                      <li class=\"StepProgress-item ms_hidetoc\">\n                                                    <div class=\"StepProgress-item__group\">\n                                <a data-id=\"faqs\"\n                                   onclick=handleScrollToTitle(\"faqs\")\n                                   class=\"StepProgress-item__link\"\n                                   data-level=\"2\">FAQs<\/a>\n                                                            <\/div>\n                                                    <\/li>\n                    \t\t\t\t\t \t\t\t\t\t \t\t\t\t\t\t  \t\t\t\t\t                                                      <li class=\"StepProgress-item ms_hidetoc\">\n                                                    <div class=\"StepProgress-item__group\">\n                                <a data-id=\"references\"\n                                   onclick=handleScrollToTitle(\"references\")\n                                   class=\"StepProgress-item__link\"\n                                   data-level=\"2\">References<\/a>\n                                                            <\/div>\n                                                    <\/li>\n                                    <\/ol>\n            <\/div>\n            <div class=\"toc-sticky__container__disperse\"><\/div>\n        <\/div>\n    <\/div>\n<\/div>\n\n<script id=\"toc-js\">\n    window.addEventListener(\"DOMContentLoaded\", () => {\n        const header = document.querySelector(\".header_wrapper\");\n\n        const pageLegend = document.querySelector('#multiCollapse1');\n        const pageLegendList = document.querySelector('#multiCollapse2');\n        const pageLegendCollapse = new bootstrap.Collapse(pageLegend, {toggle: document.querySelector(\".toc-sticky\").classList.contains('sticky')});\n\n        \/**\n         * Changing current title\n         *\/\n        (function (pageLegend) {\n            const titleNodes = pageLegend.querySelectorAll('.StepProgress-item__link');\n\n            if (!titleNodes.length) return;\n\n            const titles = [...titleNodes].map((itm, i) => ({\n                id: itm.getAttribute('data-id'),\n                text: itm.textContent,\n                level: itm.getAttribute('data-level'),\n                linkNode: itm,\n                titleNode: document.getElementById(itm.getAttribute('data-id')),\n                index: i,\n            }));\n\n            \/**\n             * Source: https:\/\/www.sitepoint.com\/throttle-scroll-events\/\n             * @param {Function} fn\n             * @param {number} wait\n             * @returns {(function(): void)|*}\n             *\/\n            const throttle = (fn, wait) => {\n                let time = Date.now();\n                return function () {\n                    if ((time + wait - Date.now()) < 0) {\n                        fn();\n                        time = Date.now();\n                    }\n                }\n            }\n\n            const changeCurrentTitle = () => {\n                const documentScrollTop = window.pageYOffset || document.documentElement.scrollTop || document.body.scrollTop || 0;\n                let current = 0;\n\n                \/\/ Title\n                titles.forEach((itm, i) => {\n\t\t\t\t\/\/console.log(itm)\n                    const itmOffsetTop = itm.titleNode ? itm.titleNode.offsetTop - 100 : 0;\n\n                    if (documentScrollTop >= itmOffsetTop) {\n                        document.getElementById('toc-current-title').innerHTML = itm.text;\n                        document.getElementById('toc-current-title').setAttribute('data-current-id', itm.id);\n                        document.getElementById('toc-current-title').setAttribute('data-current-level', itm.level);\n                        current = i;\n                    }\n                })\n\n                \/\/ close all list and open sub list if needed\n                if (document.querySelector(\".toc-sticky\").classList.contains('sticky')) {\n                    document.querySelectorAll('.subList-in-progress').forEach((el) => {\n                        el.children[1].classList.remove('show');\n                        el.getElementsByClassName('icon-chevron-down')[0].classList.remove('up');\n                    });\n                    const currentEl = titles[current];\n                    currentEl.linkNode.classList.add('show');\n                }\n\n                titles.forEach((itm, i) => {\n                    itm.linkNode.parentNode.parentNode.classList.remove('current', 'is-done');\n                    if (current > i) {\n                        itm.linkNode.parentNode.parentNode.classList.add('is-done')\n                    };\n                    if (current === i) {\n                      itm.linkNode.parentNode.parentNode.classList.add('current');\n                    };\n                })\n\n            }\n\n            changeCurrentTitle();\n\n            document.addEventListener('scroll', throttle(changeCurrentTitle, 50));\n        })(pageLegend);\n\n\n        \/**\n         *  Collapse\n         *\/\n        (function (pageLegend, header) {\n            const icon = pageLegend.parentNode.querySelector(\".collapse-action-btn i\");\n\n            const collapseToggle = (status) => (e) => {\n                if (!e.target.isEqualNode(pageLegend)) return;\n\n                icon.classList.toggle(\"up\");\n\n                const containerHeight = pageLegend.getBoundingClientRect().height;\n\n                const showSubtitleContent = () => {\n                    const currentId = document.getElementById('toc-current-title').getAttribute('data-current-id');\n                    const currentLevel = document.getElementById('toc-current-title').getAttribute('data-current-level');\n                    const currentSubTitle = currentLevel == 3 ? document.querySelector(`a[data-id=\"${currentId}\"]`).parentNode.parentNode.parentNode : false;\n\n                    if (!currentSubTitle) return;\n                    new bootstrap.Collapse(currentSubTitle, {toggle: false}).show();\n                }\n\n                showSubtitleContent();\n                if (status === 'shown' && document.querySelector(\".toc-sticky\").classList.contains('sticky') ) {\n                    document.querySelector('html').classList.remove('overflow-hidden');\n                    pageLegend.classList.add('overflow-auto');\n                    pageLegend.style.height = `calc(100vh - ${header.getBoundingClientRect().height + document.querySelector('.toc-sticky__open').getBoundingClientRect().height + 16}px)`;\n                } else if (status === 'hide') {\n                    document.querySelector('html').classList.remove('overflow-hidden');\n                    pageLegend.classList.remove('overflow-auto');\n                    pageLegend.style.height = 'auto';\n                }\n            }\n\n            pageLegend.addEventListener('shown.bs.collapse', collapseToggle('shown'));\n            pageLegend.addEventListener('hide.bs.collapse', collapseToggle('hide'));\n        })(pageLegend, header);\n\n        \/**\n         * Collapse sub-titles\n         *\/\n        (function (pageLegend) {\n            const collapseEls = pageLegend.querySelectorAll('.collapse');\n\n            collapseEls.forEach(function (el) {\n\n                const toggleArrowDirection = function (e) {\n                    if (!e.target.isEqualNode(el)) return;\n\n                    const id = this.getAttribute('id');\n                    document.querySelector(`.collapse-action-btn[data-bs-target=\"#${id}\"] .icon-chevron-down`).classList.toggle('up');\n                }\n                el.addEventListener('shown.bs.collapse', toggleArrowDirection);\n                el.addEventListener('hide.bs.collapse', toggleArrowDirection);\n            })\n        })(pageLegend);\n\n        \/**\n         *  Collapse main title\n         *\/\n        (function (pageLegendList) {\n            const icon = pageLegendList.parentNode.querySelector(\".collapse-action-btn i\");\n\n            const collapseToggle = () => (e) => {\n                if (!e.target.isEqualNode(pageLegendList)) return;\n\n                icon.classList.toggle(\"up\");\n\n            }\n            pageLegendList.addEventListener('shown.bs.collapse', collapseToggle());\n            pageLegendList.addEventListener('hide.bs.collapse', collapseToggle());\n        })(pageLegendList);\n\n        (function (pageLegendList) {\n            const collapseEls = pageLegendList.querySelectorAll('.collapse');\n\n            collapseEls.forEach(function (el) {\n\n                const toggleArrowDirection = function (e) {\n                    if (!e.target.isEqualNode(el)) return;\n\n                    const id = this.getAttribute('id');\n                    document.querySelector(`.toc-sticky-list .collapse-action-btn[data-bs-target=\"#${id}\"] .icon-chevron-down`).classList.toggle('up');\n                }\n                el.addEventListener('shown.bs.collapse', toggleArrowDirection);\n                el.addEventListener('hide.bs.collapse', toggleArrowDirection);\n            })\n        })(pageLegendList);\n\n        \/**\n         * Sticky functionality\n         * Source: https:\/\/stackoverflow.com\/questions\/17893771\/javascript-sticky-div-after-scroll\n         *\/\n        (function (header, pageLegendCollapse) {\n            \/\/ set everything outside the onscroll event (less work per scroll)\n            const target = document.querySelector(\".toc-sticky\");\n            const targetListStatic = document.querySelector(\".toc-sticky-list\");\n\n            if (!target || !header) return;\n\n            const headerHeight = header.getBoundingClientRect().height;\n            const targetHeight = targetListStatic.getBoundingClientRect().height;\n\n            \/\/ -headerHeight so it won't be jumpy\n            const stop = targetListStatic.offsetTop + headerHeight + targetHeight;\n            const docBody =\n                document.documentElement || document.body.parentNode || document.body;\n            const hasOffset = window.pageYOffset !== undefined;\n\n            const applySticky = function () {\n                \/\/ cross-browser compatible scrollTop.\n                const scrollTop = hasOffset ? window.pageYOffset : docBody.scrollTop;\n\n                \/\/ if user scrolls to headerHeight from the top of the target div\n                if (scrollTop >= stop) {\n                    pageLegendCollapse.hide();\n                    \/\/ stick the div\n                    target.classList.add(\"sticky\");\n                    \/\/target.style.marginTop = `${headerHeight}px`;\n                } else {\n                    pageLegendCollapse.show();\n                    \/\/ release the div\n                    target.classList.remove(\"sticky\");\n                    target.style.marginTop = \"\";\n                }\n            }\n\n            applySticky();\n\n            window.addEventListener('scroll', applySticky);\n        })(header, pageLegendCollapse);\n\tjQuery('span.show_moretoc').click(function(){\n\t\tjQuery('span.show_moretoc').hide();\n\t   jQuery('.ms_hidetoc').show();\n\t});\n    });\n\n    \/\/ When the user clicks on the button, scroll to the top of the document\n    function btnTop() {\n        const pageLegend = document.querySelector('#multiCollapse1');\n        document.querySelector('html').classList.remove('overflow-hidden');\n        pageLegend.classList.remove('overflow-auto');\n        pageLegend.style.height = 'auto';\n        window.scrollTo({\n            top: 0,\n            behavior: 'smooth'\n        });\n    }\n\n    const handleScrollToTitle = (id) => {\n        const el = document.getElementById(id);\n        const headerHeightDifference = window.innerWidth < 992 ? -30 : -15;\n        window.scrollTo({\n            top: el.offsetTop - 60 - headerHeightDifference - 10,\n        });\n    }\n<\/script>\n\n<h2><span id=\"how_ransomware_infects_your_systems\">How Ransomware Infects Your Systems<\/span><\/h2>\n<p>Ransomware can gain access to your <a href=\"https:\/\/www.techopedia.com\/definition\/4607\/computer\">computer<\/a> using one of a number of common techniques.<\/p>\n<div class=\"su-accordion su-u-trim\">\n<div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Illegally downloading music and films<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> Often the <a href=\"https:\/\/www.techopedia.com\/definition\/394\/download-dl\">downloads<\/a> are seeded with malware. <\/div><\/div>\n<div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Phishing emails<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> <a href=\"https:\/\/www.techopedia.com\/definition\/27330\/email-hoax\">Scam emails<\/a> that try to lure the victim into visiting a fraudulent <a href=\"https:\/\/www.techopedia.com\/definition\/5411\/website\">website<\/a> or to open a <a href=\"https:\/\/www.techopedia.com\/definition\/4015\/malicious-software-malware\">malicious<\/a>, infected attachment. <\/div><\/div>\n<div class=\"su-spoiler su-spoiler-style-fancy su-spoiler-icon-plus su-spoiler-closed\" data-scroll-offset=\"0\" data-anchor-in-url=\"no\"><div class=\"su-spoiler-title\" tabindex=\"0\" role=\"button\"><span class=\"su-spoiler-icon\"><\/span><strong>Exploiting perimeter weaknesses<\/strong><\/div><div class=\"su-spoiler-content su-u-clearfix su-u-trim\"> For example, <a href=\"https:\/\/www.techopedia.com\/definition\/3422\/remote-desktop-protocol-rdp\">Remote Desktop Protocol<\/a> (RDP) is a technology that allows staff to access the IT facilities at the office when they&#8217;re either at home or on the road. <a href=\"https:\/\/www.techopedia.com\/definition\/13484\/vulnerability\">Vulnerabilities<\/a> in the RDP implementation have been discovered in the past. These vulnerabilities have been duly exploited and used to spread ransomware. <\/div><\/div><\/div>\n<h2><span id=\"the_size_of_the_problem\">The Size of the Problem<\/span><\/h2>\n<p>Exploiting RDP vulnerabilities is one of the techniques that the <a href=\"https:\/\/economictimes.indiatimes.com\/tech\/newsletters\/ettech-unwrapped\/notpetya-the-cyberattack-that-shook-the-world\/articleshow\/89997076.cms?from=mdr\" target=\"_blank\">NotPetya ransomware<\/a> uses. NotPetya is probably the most globally harmful example of ransomware yet seen. In 2017 it was crippling companies across the globe, from SMEs to giant corporations.<\/p>\n<p>A. P. Moeller-Maersk is the world&#8217;s largest container ship and supply vessel operator. They have other interests, such as <a href=\"https:\/\/www.techopedia.com\/definition\/23789\/supply-chain-management-scm\">supply chain management<\/a> (SCM), operating ports, and drilling for oil. But on 27 June 2017, over the space of about four hours, they lost operational capability in 130 countries. Maersk didn&#8217;t pay the ransom. They had the reserves to be able to roll out new <a href=\"https:\/\/www.techopedia.com\/definition\/5300\/laptop\">laptops<\/a>, <a href=\"https:\/\/www.techopedia.com\/definition\/4607\/computer\">computers<\/a>, servers, and <a href=\"https:\/\/www.techopedia.com\/definition\/7818\/internet-protocol-telephony-ip-telephony\">IP-based telephony systems<\/a> and to rebuild their systems.<\/p>\n<p>The final price tag was in excess of \u00a3300 million.<\/p>\n<p>Norsk Hydro lost practically all ability to manufacture aluminum because of an infection of the <a href=\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/lockergoga-ransomware-family-used-in-targeted-attacks\/\" target=\"_blank\">LockerGogo ransomware<\/a>. They, too, refused to pay the ransom and ended up footing a bill in excess of $40 million. Spanish food giant Mondelez was also hit by NotPetya in 2017 and suffered losses and damages of $100 million.<\/p>\n<p>It&#8217;s worth mentioning that <a href=\"https:\/\/www.techopedia.com\/definition\/32532\/cyber-insurance\">cyber insurance<\/a> is designed to cover the costs of dealing with a <a href=\"https:\/\/www.techopedia.com\/definition\/15957\/security-incident\">security incident<\/a>, such as bringing in specialist incident handling teams, replacing <a href=\"https:\/\/www.techopedia.com\/definition\/2210\/hardware-hw\">hardware<\/a>, cleansing compromised systems, handling the media, and running hotlines for affected <a href=\"https:\/\/www.techopedia.com\/definition\/807\/data\">data<\/a> subjects. They don&#8217;t usually cover damages from loss of trading.<\/p>\n<p>And as Mondelez has found out, if the incident is classed as &#8220;<a href=\"https:\/\/www.techopedia.com\/definition\/13600\/cyberwarfare\">cyber warfare<\/a>,&#8221; the insurers can trot out the &#8220;act of war&#8221; exemption and not pay anything at all. The UK, the US, Australia, and Canada have all examined the <a href=\"https:\/\/www.techopedia.com\/definition\/547\/source-code\">source code<\/a> of NotPetya and attributed it to the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (the GU), the military intelligence service of the Russian Federation.<\/p>\n<p>These are the big headline-worthy victims. There were untold numbers of small to medium enterprises, small organizations, and corporate entities that were affected by NotPetya. And this is just one strain of ransomware.<\/p>\n<p>The <a href=\"https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/cybercrime-and-digital-threats\/keranger-ransomware-target-mac-users-bittorrent-client\" target=\"_blank\">KeRanger ransomware<\/a> was the first one to be seen specifically designed to attack <a href=\"https:\/\/www.techopedia.com\/definition\/2639\/macintosh-operating-system-mac-os\">Macs<\/a>. It was released in 2016. <a href=\"https:\/\/www.techopedia.com\/definition\/23586\/mobile-device\">Mobile devices<\/a> and <a href=\"https:\/\/www.techopedia.com\/definition\/6413\/cellular-phone\">cell phones<\/a> are at risk too. The ransomware completely locks you out of the device and won&#8217;t let you back in until the ransom has been paid.<\/p>\n<p>Most cell phone infections are the result of installing malicious apps.<\/p>\n<h2><span id=\"what_does_ransomware_do\">What Does Ransomware Do?<\/span><\/h2>\n<p>All ransomware causes (or mimics) a problem and demands payment to remove the problem. As with all malware, there are different levels of sophistication displayed by this class of malware.<\/p>\n<h3>What are the Types of Ransomware?<\/h3>\n<p><img decoding=\"async\" src=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Types-of-Ransomware-1-300x293.jpg\" alt=\"Types of Ransomware\" width=\"1200\" height=\"1172\" class=\"aligncenter wp-image-326269\" srcset=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Types-of-Ransomware-1-300x293.jpg 300w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Types-of-Ransomware-1-1024x1000.jpg 1024w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Types-of-Ransomware-1-768x750.jpg 768w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Types-of-Ransomware-1-64x64.jpg 64w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Types-of-Ransomware-1-1536x1500.jpg 1536w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Types-of-Ransomware-1-1200x1172.jpg 1200w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Types-of-Ransomware-1-1980x1934.jpg 1980w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Types-of-Ransomware-1.jpg 2048w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<h4><strong>Scareware<\/strong><\/h4>\n<p>With <a href=\"https:\/\/www.techopedia.com\/definition\/4345\/scareware\">scareware<\/a>, a message pops up declaring you have something wrong with your computer, or it is infected, or <a href=\"https:\/\/www.techopedia.com\/definition\/3805\/hacker\">hackers<\/a> have hacked into your computer. You are told that to correct the issue, you must pay the ransom and that if you do so, the computer will be disinfected, and the hackers will leave you alone. Sometimes these messages masquerade as <a href=\"https:\/\/www.techopedia.com\/definition\/626\/information-technology-it\">IT<\/a> or <a href=\"https:\/\/www.techopedia.com\/definition\/9675\/technical-support-tech-support\">tech support<\/a> packages, or even Microsoft support.<\/p>\n<p>Your files are not affected by this type of attack. If the computer can be disinfected to remove the pop-up message, it will return to normal operation.<\/p>\n<h4><strong>Screen Lockers<\/strong><\/h4>\n<p>This type of attack puts up a full-screen window that you can&#8217;t bypass and can&#8217;t close. The message it displays is a variation of some common themes.<\/p>\n<ul>\n<li>You have been hit by ransomware. Pay the ransom. Plain and simple.<\/li>\n<li>The FBI or another law enforcement agency has detected illegal downloads, <a href=\"https:\/\/www.techopedia.com\/definition\/4361\/software-piracy\">pirated software<\/a>, criminal pornography, etc., on your computer. Pay the fine to restore your machine to a working condition. Of course, if any of these were true due process would be followed, and you&#8217;d get a knock on the door \u2013 not a message on your laptop.<\/li>\n<\/ul>\n<h4><strong>Encryption Ransomware<\/strong><\/h4>\n<p>This is the real deal. These really do encrypt your files. Often they sit in your <a href=\"https:\/\/www.techopedia.com\/definition\/5537\/network\">network<\/a> for weeks before triggering to ensure they have infected as many computers as possible. They wait until mobile staff are likely to have visited the head office so that their laptops can be infected too. By waiting like this, the ransomware will have been included in your <a href=\"https:\/\/www.techopedia.com\/definition\/1056\/backup\">backups<\/a>.<\/p>\n<p>If you decide to rebuild your systems instead of paying the ransom, you&#8217;ll restore the infection along with your data. It will trigger again in a few weeks.<\/p>\n<p>A common control technique is for the ransomware to gather information and send it back to command and control servers. It is in these servers that the intelligence lies. The ransomware itself is pretty dumb. It reports back to base, receives new instructions from the automated <a href=\"https:\/\/www.techopedia.com\/definition\/4356\/software\">software<\/a> on the server, and acts on those instructions. This cycle repeats.<\/p>\n<p>However, there have been a few cases where the remote intelligence wasn&#8217;t a command and control server, it was a human being. Steering the malware like a remote drone, the <a href=\"https:\/\/www.techopedia.com\/definition\/threat-actor\">threat actor<\/a> made sure over a period of weeks that they had infected all of the <a href=\"https:\/\/www.techopedia.com\/definition\/29199\/it-infrastructure\">IT infrastructure<\/a>, local backups, and off-site backups before they triggered the <a href=\"https:\/\/www.techopedia.com\/definition\/5507\/encryption\">encryption<\/a>.<\/p>\n<h3>Who are the Common Ransomware Targets?<\/h3>\n<p>Some attacks are targeted, and others are random infections from <a href=\"https:\/\/www.techopedia.com\/definition\/4049\/phishing\">phishing<\/a> emails sent out to millions of email addresses to infect as many victims as possible.<\/p>\n<ul>\n<li>The 2019 attacks on the <strong>essential services of cities<\/strong> such as Baltimore, MD, Riviera Beach, FL, Wilmer, TX, and New Bedford, MA, were targeted, researched, and designed to be as impactful as possible.<\/li>\n<li><strong>Hospitals<\/strong> are frequently targeted because, with lives in the balance, systems must be restored as fast as possible. Ransoms are often paid for by hospitals.<\/li>\n<li>Another sector commonly targeted is the <strong>financial sector<\/strong>, simply because they have the funds to afford tremendous ransoms.<\/li>\n<\/ul>\n<p>However, most attacks hit victims that the threat actors don&#8217;t even know exist \u2013 until the ransomware triggers.<\/p>\n<h2><span id=\"how_to_protect_yourself_against_ransomware\">How to Protect Yourself Against Ransomware<\/span><\/h2>\n<p><img decoding=\"async\" src=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/7-Tips-to-Protect-Yourself-Against-Ransomware-222x300.jpg\" alt=\"7 Tips to Protect Yourself Against Ransomware\" width=\"1200\" height=\"1620\" class=\"aligncenter wp-image-325903\" srcset=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/7-Tips-to-Protect-Yourself-Against-Ransomware-222x300.jpg 222w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/7-Tips-to-Protect-Yourself-Against-Ransomware-758x1024.jpg 758w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/7-Tips-to-Protect-Yourself-Against-Ransomware-768x1037.jpg 768w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/7-Tips-to-Protect-Yourself-Against-Ransomware-1138x1536.jpg 1138w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/7-Tips-to-Protect-Yourself-Against-Ransomware-1517x2048.jpg 1517w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/7-Tips-to-Protect-Yourself-Against-Ransomware-1200x1620.jpg 1200w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/7-Tips-to-Protect-Yourself-Against-Ransomware-1980x2673.jpg 1980w, https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/7-Tips-to-Protect-Yourself-Against-Ransomware-scaled.jpg 1896w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<p>These steps are <a href=\"https:\/\/www.techopedia.com\/nas-security-guide\">cyber security best practices<\/a> and should be adopted and followed as the norm:<\/p>\n<div class=\"su-list\" style=\"margin-left:0px\">\n<ul>\n<li><i class=\"sui sui-check-circle\" style=\"color:#3CB371\"><\/i> Keep all of your workstation, laptop, and server <a href=\"https:\/\/www.techopedia.com\/definition\/3515\/operating-system-os\">operating systems<\/a> (OSs) patched and up-to-date. This reduces the number of vulnerabilities your systems harbor. The fewer vulnerabilities, the fewer possible exploits.<\/li>\n<li><i class=\"sui sui-check-circle\" style=\"color:#3CB371\"><\/i> Don&#8217;t use <a href=\"https:\/\/www.techopedia.com\/definition\/4961\/administrative-privileges\">administrative privileges<\/a> for anything other than administration. Don&#8217;t give programs and processes administrative privileges either.<\/li>\n<li><i class=\"sui sui-check-circle\" style=\"color:#3CB371\"><\/i> Install centrally managed end-point protection, which can include <a href=\"https:\/\/www.techopedia.com\/antivirus\/best-antivirus-software\">antivirus software<\/a> and <a href=\"https:\/\/www.techopedia.com\/definition\/25873\/anti-malware\">antimalware<\/a> functionality, and keep it up-to-date. Make sure users are unable to refuse or defer signature updates.<\/li>\n<li><i class=\"sui sui-check-circle\" style=\"color:#3CB371\"><\/i> Make frequent backups to different media, including off-site backups. This won&#8217;t prevent infection, but it will aid in recovery. Regularly <a href=\"https:\/\/www.techopedia.com\/definition\/6121\/backup-and-recovery-test\">test your backups<\/a>.<\/li>\n<li><i class=\"sui sui-check-circle\" style=\"color:#3CB371\"><\/i> Create a <a href=\"https:\/\/www.techopedia.com\/definition\/1074\/disaster-recovery-plan-drp\">disaster recovery plan<\/a> (DRP), get senior buy-in, and implement everything you can to increase the ability of your business to function if you are stricken by an attack.<\/li>\n<li><i class=\"sui sui-check-circle\" style=\"color:#3CB371\"><\/i> Create a <a href=\"https:\/\/www.techopedia.com\/definition\/30967\/cyber-incident-response-plan-cirp\">cyber incident handling policy<\/a>, and rehearse it.<\/li>\n<li><i class=\"sui sui-check-circle\" style=\"color:#3CB371\"><\/i> Provide <a href=\"https:\/\/www.techopedia.com\/how-to-make-cyber-awareness-training-work\">cyber awareness training<\/a> for your staff. If they find an unidentified memory stick in the car park at lunchtime, are they going to plug it into one of your computers straight after lunch? Will they know not to open unsolicited email attachments? Are they working in a diligent and cautious way, and do you foster a security-minded culture?<\/li>\n<\/ul>\n<\/div>\n<h3>Should You Pay the Ransom?<\/h3>\n<p>Most law enforcement and government agencies involved in cyber security advise you not to pay the ransom and urge you to report the attack. Paying the ransom means the threat actors are encouraged to continue their attacks. If no one pays them, the theory goes, ransomware will be pointless and will die out.<\/p>\n<p>In the heat of the moment, when you&#8217;re trying to weigh up the cost of the ransom versus the costs associated with not paying the ransom, it&#8217;s a tough call. You have to consider the overall price of cleansing or replacing equipment, rebuilding and restoring your line-of-business systems, and the loss of revenue while you do so.<\/p>\n<p>Few organizations have the financial clout to weather an attack the way Maersk did.<\/p>\n<p>Sometimes it is the fear \u2013 and cost \u2013 of the reputational damage that drives companies to pay the ransom. They wish to protect their standing in the eyes of clients and the wider marketplace by putting the short hiatus down to some technical issues.<\/p>\n<p>It&#8217;s worth pointing out that there are cases where the ransom was paid, but it still took over a month for the key to be delivered to the victim. There&#8217;s no feasible way to keep that quiet.<\/p>\n<p>It&#8217;s difficult to put a figure on it, but estimates suggest that 65 percent of ransomware attacks are not reported, and the ransoms are paid. Ransoms of over $5 million have been seen, but in nearly all cases, the ransoms are pitched much lower. This makes them affordable to the average SME and cheaper than the costs associated with not paying the ransom.<\/p>\n<p>Some ransomware is even geographically-aware and adjusts its price according to the economy of the country of the victim.<\/p>\n<p><strong>And the big question is, do you get your data back?<\/strong><\/p>\n<p>Estimates say that in 65 to 70 percent of cases, the data is decrypted successfully. Sometimes the decryption routines haven&#8217;t even been written \u2013 the threat actors take the money and run. You&#8217;re dealing with criminals, after all. But that sort of ransomware has a short shelf life.<\/p>\n<p>Once word gets around that you&#8217;re not going to get your data back, no one is going to pay the ransom. So it makes economic sense for the threat actors to decrypt the victim&#8217;s files whenever they can.<\/p>\n<p>Sometimes the decryption routines simply don&#8217;t work. All software is prone to <a href=\"https:\/\/www.techopedia.com\/definition\/3758\/bug\">bugs<\/a>. The threat actors devote more development time and effort to the infection, replication, and encryption routines than to the decryption routines. They may have intended them to work, but they sometimes don&#8217;t.<\/p>\n<p>It&#8217;s easy to take the moral high ground and say don&#8217;t pay, it&#8217;s something else to be in the middle of an incident that could bring your business down and not be tempted by the &#8220;easy&#8221; way out.<\/p>\n<p>As the saying goes, I&#8217;m not a doctor, but I do know prevention is better than a cure.<\/p>\n<h2><span id=\"the_bottom_line\">The Bottom Line<\/span><\/h2>\n<p>Ransomware definition is a type of malware that encrypts your files and locks you out until you pay a ransom for a decryption key. It poses a severe threat to businesses by locking down systems and causing significant financial damage. The best defense in this case is prevention \u2013 keeping systems updated, backing up data, limiting access, and training employees. Having a solid disaster recovery plan is crucial, as no system is entirely safe.<\/p>\n<p>Deciding whether to pay the ransom is difficult, and even if you do, there&#8217;s no guarantee you&#8217;ll get your data back. The best ways to protect your business from ransomware are to focus on prevention and have a clear recovery plan.<\/p>\n<h2><span id=\"faqs\">FAQs<\/span><\/h2>\n<div class=\"man_faq_sec\" itemscope itemtype=\"https:\/\/schema.org\/FAQPage\"><\/time><section class=\"ms_faq ms_card \" ><div itemscope itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\"><div class=\"accordionButton\"><h3 itemprop=\"name\">What is ransomware in simple terms?<\/h3> <\/div>\n<div class=\"accordionContent\" itemscope itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" style=\"display:none;\"><p itemprop=\"text\">Ransomware is a type of malicious software that locks you out of your device or files and demands money (a ransom) to give you access again.<\/p>\r\n                <\/div><\/div><\/section>\n<section class=\"ms_faq ms_card \" ><div itemscope itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\"><div class=\"accordionButton\"><h3 itemprop=\"name\">How does ransomware get on your device?<\/h3> <\/div>\n<div class=\"accordionContent\" itemscope itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" style=\"display:none;\"><p itemprop=\"text\">Ransomware infects your device through suspicious emails, fake websites, untrusted software, or phishing attacks that trick you into clicking harmful links.<\/p>\r\n                <\/div><\/div><\/section>\n<section class=\"ms_faq ms_card \" ><div itemscope itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\"><div class=\"accordionButton\"><h3 itemprop=\"name\">What happens if you get ransomware?<\/h3> <\/div>\n<div class=\"accordionContent\" itemscope itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" style=\"display:none;\"><p itemprop=\"text\">If you get ransomware, your files may be encrypted, or your device might get locked. You&#8217;ll usually see a message demanding payment (often in cryptocurrency) to unlock your files or device.<\/p>\r\n                <\/div><\/div><\/section>\n<section class=\"ms_faq ms_card \" ><div itemscope itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\"><div class=\"accordionButton\"><h3 itemprop=\"name\">Can ransomware virus be removed?<\/h3> <\/div>\n<div class=\"accordionContent\" itemscope itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" style=\"display:none;\"><p itemprop=\"text\">Yes, ransomware can be removed with special tools or expert help, but encrypted files may stay locked without a backup or decryption tool. Paying the ransom doesn&#8217;t always guarantee file recovery.<\/p>\r\n                <\/div><\/div><\/section>\n<div class=\"reference-content\">\n<div class=\"reference-heading reference-content-collapsible-heading\">\n<h2><span id=\"references\">References<\/span><\/h2>\n<\/div>\n<div class=\"reference-content-body\">\n<ol>\n<li><a href=\"https:\/\/economictimes.indiatimes.com\/tech\/newsletters\/ettech-unwrapped\/notpetya-the-cyberattack-that-shook-the-world\/articleshow\/89997076.cms?from=mdr\" target=\"_blank\">NotPetya: the cyberattack that shook the world<\/a> (Economic Times)<\/li>\n<li><a href=\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/lockergoga-ransomware-family-used-in-targeted-attacks\/\" target=\"_blank\">LockerGoga Ransomware Family Used in Targeted Attacks<\/a> (McAfee)<\/li>\n<li><a href=\"https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/cybercrime-and-digital-threats\/keranger-ransomware-target-mac-users-bittorrent-client\" target=\"_blank\">KeRanger: First Ransomware to Target Mac Users Found in BitTorrent Client<\/a> (Trend Micro)<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>What is Ransomware? There are many types of malware floating around \u2013 one being ransomware. Ransomware is a malware that encrypts all the files on your workstations and servers. Without access to your files, your business is dead in the water. To regain access, you must pay a ransom to obtain the digital decryption key. [&hellip;]<\/p>\n","protected":false},"author":286520,"featured_media":118300,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"_lmt_disableupdate":"","_lmt_disable":"","om_disable_all_campaigns":false,"footnotes":""},"definitioncat":[255],"class_list":["post-3793","definition","type-definition","status-publish","format-standard","has-post-thumbnail","hentry","definitioncat-cyber-threats"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What is Ransomware? Definition, How It Works &amp; How to Protect Yourself<\/title>\n<meta name=\"description\" content=\"Ransomware encrypts your files and stops your business in its tracks. To regain access, you must pay a ransom. Learn the full ransomware meaning here.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware\" \/>\n<meta property=\"og:description\" content=\"Ransomware encrypts your files and stops your business in its tracks. To regain access, you must pay a ransom. Learn the full ransomware meaning here.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.techopedia.com\/definition\/ransomware\" \/>\n<meta property=\"og:site_name\" content=\"Techopedia\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/techopedia\/\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-03T16:46:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@techopedia\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware\"},\"author\":{\"name\":\"Marshall Gunnell\",\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/person\/1567ab91e6d542d462510643a1874607\"},\"headline\":\"Ransomware\",\"datePublished\":\"2012-11-16T12:08:00+00:00\",\"dateModified\":\"2024-10-03T16:46:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware\"},\"wordCount\":2341,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.techopedia.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.techopedia.com\/definition\/ransomware#respond\"]}],\"articleSection\":\"\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware\",\"url\":\"https:\/\/www.techopedia.com\/definition\/ransomware\",\"name\":\"What is Ransomware? Definition, How It Works & How to Protect Yourself\",\"isPartOf\":{\"@id\":\"https:\/\/www.techopedia.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg\",\"datePublished\":\"2012-11-16T12:08:00+00:00\",\"dateModified\":\"2024-10-03T16:46:31+00:00\",\"description\":\"Ransomware encrypts your files and stops your business in its tracks. To regain access, you must pay a ransom. Learn the full ransomware meaning here.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.techopedia.com\/definition\/ransomware\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware#primaryimage\",\"url\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg\",\"contentUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg\",\"width\":1200,\"height\":600,\"caption\":\"What is a Ransomware?\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.techopedia.com\/definition\/ransomware#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.techopedia.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cybersecurity\",\"item\":\"https:\/\/www.techopedia.com\/topic\/4\/cybersecurity\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Cyber Threats\",\"item\":\"https:\/\/www.techopedia.com\/topic\/220\/cyber-threats\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Term\",\"item\":\"https:\/\/www.techopedia.com\/definition\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Ransomware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.techopedia.com\/#website\",\"url\":\"https:\/\/www.techopedia.com\/\",\"name\":\"Techopedia\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.techopedia.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.techopedia.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.techopedia.com\/#organization\",\"name\":\"Techopedia\",\"url\":\"https:\/\/www.techopedia.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2025\/02\/techopedia-light-logo.svg\",\"contentUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2025\/02\/techopedia-light-logo.svg\",\"caption\":\"Techopedia\"},\"image\":{\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/techopedia\/\",\"https:\/\/x.com\/techopedia\",\"https:\/\/www.linkedin.com\/company\/techopedia\/\",\"https:\/\/www.youtube.com\/c\/Techopedia\"],\"publishingPrinciples\":\"https:\/\/www.techopedia.com\/about\/editorial-policy\",\"ownershipFundingInfo\":\"https:\/\/www.techopedia.com\/about\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/person\/1567ab91e6d542d462510643a1874607\",\"name\":\"Marshall Gunnell\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.techopedia.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/05\/avatar_user_286520_1683873714-300x300.jpg\",\"contentUrl\":\"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/05\/avatar_user_286520_1683873714-300x300.jpg\",\"caption\":\"Marshall Gunnell\"},\"description\":\"Marshall, a Mississippi native, is a dedicated IT and cybersecurity expert with over a decade of experience. Along with Techopedia, his articles can be found on Business Insider, PCWorld, VGKAMI, How-To Geek, and Zapier. His articles have reached a massive audience of over 100 million people. Marshall previously served as the Chief Marketing Officer (CMO) and technical staff writer at StorageReview, providing comprehensive news coverage and detailed product reviews on storage arrays, hard drives, SSDs, and more. He also developed sales strategies based on regional and global market research to identify and create new project initiatives. Currently, Marshall resides in Tokyo, Japan. When he's not working, he spends his time diligently breaking down complex subjects for the masses, mastering the Japanese language, savoring budget-friendly sake, indulging in onsens, and hiking through Japan's picturesque mountains.\",\"sameAs\":[\"https:\/\/vgkami.com\/\",\"https:\/\/www.linkedin.com\/in\/marshallgunnell\",\"https:\/\/x.com\/https:\/\/twitter.com\/makojunkie_\",\"https:\/\/www.youtube.com\/@vgkami\"],\"knowsAbout\":[\"IT & Cybersecurity Expert\"],\"url\":\"https:\/\/www.techopedia.com\/contributors\/marshallgunnell\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What is Ransomware? Definition, How It Works & How to Protect Yourself","description":"Ransomware encrypts your files and stops your business in its tracks. To regain access, you must pay a ransom. Learn the full ransomware meaning here.","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"Ransomware","og_description":"Ransomware encrypts your files and stops your business in its tracks. To regain access, you must pay a ransom. Learn the full ransomware meaning here.","og_url":"https:\/\/www.techopedia.com\/definition\/ransomware","og_site_name":"Techopedia","article_publisher":"https:\/\/www.facebook.com\/techopedia\/","article_modified_time":"2024-10-03T16:46:31+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@techopedia","twitter_misc":{"Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.techopedia.com\/definition\/ransomware#article","isPartOf":{"@id":"https:\/\/www.techopedia.com\/definition\/ransomware"},"author":{"name":"Marshall Gunnell","@id":"https:\/\/www.techopedia.com\/#\/schema\/person\/1567ab91e6d542d462510643a1874607"},"headline":"Ransomware","datePublished":"2012-11-16T12:08:00+00:00","dateModified":"2024-10-03T16:46:31+00:00","mainEntityOfPage":{"@id":"https:\/\/www.techopedia.com\/definition\/ransomware"},"wordCount":2341,"commentCount":0,"publisher":{"@id":"https:\/\/www.techopedia.com\/#organization"},"image":{"@id":"https:\/\/www.techopedia.com\/definition\/ransomware#primaryimage"},"thumbnailUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.techopedia.com\/definition\/ransomware#respond"]}],"articleSection":""},{"@type":"WebPage","@id":"https:\/\/www.techopedia.com\/definition\/ransomware","url":"https:\/\/www.techopedia.com\/definition\/ransomware","name":"What is Ransomware? Definition, How It Works & How to Protect Yourself","isPartOf":{"@id":"https:\/\/www.techopedia.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.techopedia.com\/definition\/ransomware#primaryimage"},"image":{"@id":"https:\/\/www.techopedia.com\/definition\/ransomware#primaryimage"},"thumbnailUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg","datePublished":"2012-11-16T12:08:00+00:00","dateModified":"2024-10-03T16:46:31+00:00","description":"Ransomware encrypts your files and stops your business in its tracks. To regain access, you must pay a ransom. Learn the full ransomware meaning here.","breadcrumb":{"@id":"https:\/\/www.techopedia.com\/definition\/ransomware#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.techopedia.com\/definition\/ransomware"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.techopedia.com\/definition\/ransomware#primaryimage","url":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg","contentUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2012\/11\/Ransomware.jpg","width":1200,"height":600,"caption":"What is a Ransomware?"},{"@type":"BreadcrumbList","@id":"https:\/\/www.techopedia.com\/definition\/ransomware#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.techopedia.com\/"},{"@type":"ListItem","position":2,"name":"Cybersecurity","item":"https:\/\/www.techopedia.com\/topic\/4\/cybersecurity"},{"@type":"ListItem","position":3,"name":"Cyber Threats","item":"https:\/\/www.techopedia.com\/topic\/220\/cyber-threats"},{"@type":"ListItem","position":4,"name":"Term","item":"https:\/\/www.techopedia.com\/definition"},{"@type":"ListItem","position":5,"name":"Ransomware"}]},{"@type":"WebSite","@id":"https:\/\/www.techopedia.com\/#website","url":"https:\/\/www.techopedia.com\/","name":"Techopedia","description":"","publisher":{"@id":"https:\/\/www.techopedia.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.techopedia.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.techopedia.com\/#organization","name":"Techopedia","url":"https:\/\/www.techopedia.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.techopedia.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2025\/02\/techopedia-light-logo.svg","contentUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2025\/02\/techopedia-light-logo.svg","caption":"Techopedia"},"image":{"@id":"https:\/\/www.techopedia.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/techopedia\/","https:\/\/x.com\/techopedia","https:\/\/www.linkedin.com\/company\/techopedia\/","https:\/\/www.youtube.com\/c\/Techopedia"],"publishingPrinciples":"https:\/\/www.techopedia.com\/about\/editorial-policy","ownershipFundingInfo":"https:\/\/www.techopedia.com\/about"},{"@type":"Person","@id":"https:\/\/www.techopedia.com\/#\/schema\/person\/1567ab91e6d542d462510643a1874607","name":"Marshall Gunnell","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.techopedia.com\/#\/schema\/person\/image\/","url":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/05\/avatar_user_286520_1683873714-300x300.jpg","contentUrl":"https:\/\/www.techopedia.com\/wp-content\/uploads\/2023\/05\/avatar_user_286520_1683873714-300x300.jpg","caption":"Marshall Gunnell"},"description":"Marshall, a Mississippi native, is a dedicated IT and cybersecurity expert with over a decade of experience. Along with Techopedia, his articles can be found on Business Insider, PCWorld, VGKAMI, How-To Geek, and Zapier. His articles have reached a massive audience of over 100 million people. Marshall previously served as the Chief Marketing Officer (CMO) and technical staff writer at StorageReview, providing comprehensive news coverage and detailed product reviews on storage arrays, hard drives, SSDs, and more. He also developed sales strategies based on regional and global market research to identify and create new project initiatives. Currently, Marshall resides in Tokyo, Japan. When he's not working, he spends his time diligently breaking down complex subjects for the masses, mastering the Japanese language, savoring budget-friendly sake, indulging in onsens, and hiking through Japan's picturesque mountains.","sameAs":["https:\/\/vgkami.com\/","https:\/\/www.linkedin.com\/in\/marshallgunnell","https:\/\/x.com\/https:\/\/twitter.com\/makojunkie_","https:\/\/www.youtube.com\/@vgkami"],"knowsAbout":["IT & Cybersecurity Expert"],"url":"https:\/\/www.techopedia.com\/contributors\/marshallgunnell"}]}},"_links":{"self":[{"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/definition\/3793","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/definition"}],"about":[{"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/types\/definition"}],"author":[{"embeddable":true,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/users\/286520"}],"replies":[{"embeddable":true,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/comments?post=3793"}],"version-history":[{"count":2,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/definition\/3793\/revisions"}],"predecessor-version":[{"id":326270,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/definition\/3793\/revisions\/326270"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/media\/118300"}],"wp:attachment":[{"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/media?parent=3793"}],"wp:term":[{"taxonomy":"definitioncat","embeddable":true,"href":"https:\/\/www.techopedia.com\/wp-json\/wp\/v2\/definitioncat?post=3793"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}