What Is Ransomware?

What is Ransomware?

Ransomware is a type of malware that either encrypts the data on the hardware or locks the system's screen with the effect of preventing the legitimate user from accessing their files. Users are presented with a ransom demand instead of their files, log in screen or home screen. Cyber criminals typically demand that ransom payment be made in cryptocurrencies such as bitcoin.

There are two main forms of ransomware: crypto-ransomware and device-lockers. Device-lockers block the user from using their own hardware. The lock screen is used to communicate the message of extortion. Crypto-ransomware is the more evolved, targeted version of ransomware that irreversibly encrypts particular files, documents and folders.

Who is Affected and Why?

How to protect yourself?

Readers are advised to invest in a quality external hard drive and back up data regularly. Adherence to the principle of least privilege is a must - avoid running programs as root unless absolutely necessary. Windows users should keep UAC enabled.

Ensure that all operating systems (no one should be using Windows XP in 2017) and programs are kept up to date; install anti-virus software (and keep it up to date); install security patches as soon as possible. Avoid installing programs from illegitimate sources (suspect websites, torrents, unsolicited emails etc.)