# Ransomware

**What is ransomware?**

Ransomware is malware that encrypts your data and demands a ransom to release it. The data is often copied before encryption as well, so the attacker can threaten to publish it.

The way in usually runs through an email with an attachment or link, through poorly secured remote access, or through a known vulnerability whose update is missing.

The consequences are decided by your ability to restore. A business with tested, immutable backups is working again within hours to days. Public bodies such as ENISA and the Onlinesicherheit initiative recommend reporting incidents and treating any ransom payment with great caution, since payment does not guarantee the data comes back.

## Related terms
- [Backup and restore](https://vetosec.at/en/it-security/backup-wiederherstellung/)
- [Malware](https://vetosec.at/en/it-security/malware/)
- [IT emergency plan](https://vetosec.at/en/it-security/notfallplan/)
- [Phishing](https://vetosec.at/en/it-security/phishing/)

## Source
https://vetosec.at/en/it-security/ransomware/ (vetosec, angriffe)