What is: Ransomware

Ransomware is malicious software that encrypts a business's files and demands a ransom to unlock them, often after stealing data first.

Entry usually happens through phishing, stolen passwords or exposed remote access. Once in, it encrypts data and backups and stops the business from operating.

Paying the ransom does not guarantee recovery and funds the attackers. Prevention — updates, MFA, EDR, immutable backup — costs many times less than recovery.