Attacks
Ransomware
What is ransomware?
Ransomware is malware that encrypts your data and demands a ransom to release it. The data is often copied before encryption as well, so the attacker can threaten to publish it.
The way in usually runs through an email with an attachment or link, through poorly secured remote access, or through a known vulnerability whose update is missing.
The consequences are decided by your ability to restore. A business with tested, immutable backups is working again within hours to days. Public bodies such as ENISA and the Onlinesicherheit initiative recommend reporting incidents and treating any ransom payment with great caution, since payment does not guarantee the data comes back.
Backup an attacker cannot delete Reviewing backup and emergency preparedness
All terms in the knowledge base
Legal notice: We are engineers, not lawyers: we cannot and will not make any statements on legal questions. This entry is purely technical, reflects the state of knowledge to the best of our understanding, and is not legal advice; it does not replace review by a qualified lawyer. No guarantee is given as to correctness or completeness; liability arising from the use of this information is excluded to the extent permitted by law. What counts is always the version currently in force at the responsible body, for example dsb.gv.at, nis.gv.at or enisa.europa.eu. AI transparency: parts of this entry may have been created with AI assistance, so errors are possible despite review: please report errors here · how we create content.
From the term to practice
Where does your business actually stand?
The IT Check reviews your IT across 8 audit areas with more than 100 individual checks and delivers documented findings with a prioritised action plan. From 1,299 € excl. VAT.
office [at] vetosec [dot] at · vetosec.at/contact/
