Attacks

Ransomware

What is ransomware?

Ransomware is malware that encrypts your data and demands a ransom to release it. The data is often copied before encryption as well, so the attacker can threaten to publish it.

The way in usually runs through an email with an attachment or link, through poorly secured remote access, or through a known vulnerability whose update is missing.

The consequences are decided by your ability to restore. A business with tested, immutable backups is working again within hours to days. Public bodies such as ENISA and the Onlinesicherheit initiative recommend reporting incidents and treating any ransom payment with great caution, since payment does not guarantee the data comes back.

Reviewing backup and emergency preparedness

Related terms

Backup and restore A backup is a copy of your data. What decides its value is the restore: only a tested restore run proves the copy will hold when … Malware Malware is software written to damage, spy on or remotely control a system. It covers viruses, trojans, ransomware, spyware and l… IT emergency plan An IT emergency plan is a short written instruction setting out who does what during an IT outage or cyber attack, who is contact… Phishing Phishing is an attempt to obtain credentials or money through faked messages. The message poses as a known sender and creates tim…

All terms in the knowledge base

Note: This entry reflects the state of knowledge to the best of our understanding and serves as general orientation. It is not legal advice. What counts is always the version currently in force at the responsible body, for example dsb.gv.at, nis.gv.at or enisa.europa.eu.

From the term to practice

Where does your business actually stand?

The IT Check reviews your IT across 8 audit areas with more than 100 individual checks and delivers documented findings with a prioritised action plan. From 1,299 € excl. VAT. The first call takes 20 minutes and carries no charge.

Book a first call