What is ransomware?
Ransomware is malicious software ("malware") that locks you out of your own files or device — usually by encrypting them so they can't be opened — and then demands payment to restore access. The demand often comes as an on-screen note asking for payment in cryptocurrency, with a countdown clock to add pressure.
How does it get onto a device?
Ransomware almost always needs you to do something first. The most common ways it spreads:
- Opening an attachment or clicking a link in an unexpected email
- Downloading "free" software, movies, or files from untrustworthy websites
- Clicking a fake pop-up claiming your device needs an urgent "update" or "cleanup"
- Plugging in an infected USB drive
- Criminals exploiting an out-of-date operating system or app that hasn't been patched
⚠️ Should you pay the ransom?
- Paying does not guarantee your files will be returned
- It funds criminal activity and can mark you as a willing target for future attacks
- Law enforcement (including the FBI) generally advises against paying
Who does it target?
Ransomware doesn't just target big companies and hospitals — it targets anyone with a device and files worth protecting: photos, financial records, tax documents, or a small business's customer list. Attackers cast a wide net, so anyone can be a target.
✅ Quick tips
- Back up your important files regularly (covered in detail in Module 4)
- Keep your operating system and apps updated
- Never click links or open attachments from unexpected or unfamiliar messages
- Use antivirus/security software and keep it turned on
- Know who to call for help before you need it — a trusted family member, TechEase, or a professional