Protection against ransomware
and crypto viruses

// understanding the threat

What is ransomware and how does it work?

Ransomware is malicious software that, once it infects your computer, encrypts all files — documents, photos, databases, accounting data — and makes them completely inaccessible. After that, it displays a message asking for a ransom (most often in cryptocurrencies) in exchange for a decryption key.

The problem is multifaceted: paying the ransom does not guarantee data recovery, the amounts range from several hundred to tens of thousands of euros, and recovery without a key is practically impossible for modern encryption algorithms (AES-256, RSA-2048).

How does ransomware get on your computer?

• Phishing e-mails with attachments or malicious links (the most common way)
• Infected websites and fake downloads
• Unsecured RDP (Remote Desktop) — common in remote work
• Infected USB devices and external drives
• Vulnerabilities in outdated software and operating system
• Attacks through unprotected network shares

Known types of ransomware

• WannaCry — infected 200,000+ computers in 150 countries in one day
• REvil / Sodinokibi — targeted hotels, restaurants and small businesses
• LockBit — one of the most active ransomware attacks at the moment
• Ryuk — specifically targeted hospitals and public institutions
• Locky, Cerber, CryptoLocker — classic crypto viruses