Ransomware Guide
What ransomware is, how attacks unfold, and how homes and organisations can reduce damage.
What ransomware does
Ransomware encrypts files, locks systems, or steals data before demanding payment. Modern groups often use double extortion: threatening to leak stolen information even if backups exist.
How attacks begin
Common paths include phishing attachments, stolen passwords, exposed remote desktop services, unpatched VPNs, compromised suppliers, and malicious downloads.
Damage reduction
Segment networks, patch internet-facing systems, remove unused accounts, require multi-factor authentication, monitor unusual logins, and keep tested offline backups.
If it happens
Disconnect affected systems, preserve evidence, contact incident response support, notify relevant parties, and avoid rushing into payment decisions without legal and security advice.