Ransomware

Overview

Ransomware is a type of malware that encrypts files and demands ransom payments for decryption. It often spreads via phishing emails, malicious downloads, or exploiting vulnerabilities.

Real-World Example

The WannaCry ransomware attack (2017) affected over 200,000 computers across 150 countries, crippling hospitals, businesses, and governments.

How it Works

1. Infection via phishing email or exploit.
2. Files are encrypted with strong algorithms.
3. Ransom note is displayed demanding cryptocurrency payment.

Prevention

• Keep backups of important files offline.
• Apply timely software and OS patches.
• Use advanced anti-malware solutions.
• Train users to avoid suspicious emails and links.