What is ransomware? And why back-up is required these days.

Ransomware is a type of malicious software that encrypts all data on a computer or an entire computer network of an organization. Due to this encryption the data cannot be accessed anymore by the owner. The cyber criminals then ask a certain sum (ransom) to decrypt the data again. Or they even threaten to publish confidential information from the data they have encrypted if no money is paid.

Ransomware not only targets large companies

There are different types of ransomware attacks. Some attacks target a large number of consumer computers by sending malicious code by e-mail (e.g. in an e-mail attachment). Once the user clicks on the attachment the code is triggered and immediately locks the screen displaying a message asking for a certain sum, in the meantime encrypting the data on the computer. Other attacks can target specific companies, the ransom asked is often much higher.

Modern ransomware attacks your backup first

As most companies nowadays make regular backups of their systems and also a lot of consumers backup their files and photo’s, it was possible to restore the files after a ransomware attack, without having to pay. However also cyber criminals “update” their methods. The modern ransomware, once executed immediately goes to the backups first and encrypts them, then the original data is encrypted. This way making it impossible to restore a system without loosing the data, or paying the ransom asked.

Good security software protects against ransomware, but the user must stay vigilant

At this moment there are good security suites available that also protect against ransomware. However even the best security software cannot protect against everything as cyber criminals also are developing their malicious software further. It remains very important that the user stays vigilant and pays attention.