What is ransomware?

Ransomware encrypts victim files and demands payment for decryption. Attackers hold data hostage until victims pay ransom, typically in cryptocurrency. Modern ransomware also threatens to publish stolen data if payment isn't made.

Email delivery: ransomware arrives via malicious attachments (documents with macros, executables in archives) or links to malware downloads. Initial infection enables encryption and ransom demand.

Impact includes: business disruption from inaccessible data, ransom payment costs, recovery expenses, regulatory consequences if personal data is compromised, and reputation damage. Prevention is far cheaper than remediation.