What is ransomware?

Ransomware encrypts victim files and demands payment for decryption. Attackers hold data hostage until victims pay ransom, typically in cryptocurrency. Modern **ransomware** also threatens to publish stolen data if payment isn't made.

Email delivery: **ransomware** arrives via malicious attachments (documents with macros, executables in archives) or links to **malware** downloads. Initial infection enables encryption and ransom demand.

Impact includes: business disruption from inaccessible data, ransom payment costs, recovery expenses, regulatory consequences if personal data is compromised, and reputation damage. Prevention is far cheaper than remediation.