Ransomware, Explained
Ransomware is malicious software that locks up your files — or your whole computer — and demands payment to get them back. It can hit individuals and businesses alike, often arriving through a single careless click. Here's how it works, why paying rarely helps, and the simple habits that keep you protected.
How an attack unfolds
It sneaks in
A booby-trapped email attachment, a fake download, or an unpatched security hole lets the malware onto your device — usually without you noticing.
It spreads quietly
Before revealing itself, it maps out your files and can crawl across connected drives, backups, and shared network folders to maximise the damage.
It locks your files
The malware scrambles your documents, photos, and data with encryption, leaving them unreadable. Your files are still there — you just can't open them.
It demands a ransom
A message appears demanding payment — usually in cryptocurrency — for the key to unlock everything, often with a countdown to pressure you into paying fast.
A good backup beats any ransom.
Paying up is risky — there's no guarantee the criminals will actually unlock your files, and it marks you as a target for the next attack. The reliable way out is having clean backups you can restore from, so you can wipe the infected device and bring your data back without paying a cent. Keep at least one backup offline or in the cloud, disconnected from your main computer, so the ransomware can't reach and encrypt it too. If you're ever hit, disconnect the device from the internet right away and seek help before doing anything else.
How to protect yourself
Back up regularly
Keep copies of your important files — ideally one in the cloud and one offline, disconnected from your computer. If ransomware strikes, you can restore your data instead of paying.
Your Safety NetKeep software updated
Ransomware loves unpatched systems. Turn on automatic updates for your operating system, browser, and apps so known security holes get closed before attackers can use them.
Auto-UpdateThink before you click
Most ransomware arrives by email. Be wary of unexpected attachments and links, especially anything urgent or too good to be true. When in doubt, don't open it.
Stay Scam-AwareUse security software
Keep reputable antivirus or security software switched on and current. It can catch and block many ransomware strains before they ever get a chance to run.
Active ProtectionLimit access & accounts
Use a standard (non-admin) account for everyday tasks so malware can't make sweeping changes, and turn on MFA to stop attackers logging in and planting ransomware.
Least PrivilegeHave a recovery plan
Know what you'd do if hit: disconnect the device, don't pay blindly, and report it. Check resources like No More Ransom for free decryption tools before considering payment.
Be ReadyDon't wait for an attack to get ready.
Get simple, jargon-free tips on backing up your data, spotting threats, and keeping ransomware out — so your files, photos, and devices stay safe and recoverable.