Dictionary · Cybersecurity Fundamentals
Ransomware
Threats · Beginner
Malicious software that denies access to data or systems, commonly by encrypting files, and pressures the victim to pay to restore them.
The business damage is the locked data and the downtime, not only the payment demand. Tested backups and limited privileges matter more than negotiating with the criminal.
Example: Users find file names changed and a note demanding payment. Restoring from an offline backup avoids paying. That incident is ransomware.
Common misconception
- Paying does not reliably restore data or prevent a repeat. Offline, tested backups are the practical defense.