Ransomware

What is Ransomware?

Ransomware encrypts files on infected systems and demands payment (usually in cryptocurrency) for the decryption key. Modern ransomware operations also exfiltrate data before encrypting, threatening to publish it if the ransom isn't paid (double extortion). Ransomware spreads through phishing emails, exploited vulnerabilities, and compromised remote access. Prevention requires regular backups, patch management, network segmentation, email security, endpoint detection, and incident response planning.