Have you ever gotten an email from a colleague that looked slightly off, asking you to download a file you weren’t expecting? A closer look might reveal the email never actually came from their address at all. If you didn’t download that file, you likely just dodged a ransomware attack.
What Is Ransomware?
Ransomware is a form of malware that encrypts a victim’s files and blocks them from accessing their own data. The attacker then demands a ransom payment, usually in bitcoin, to restore access.
Attackers most commonly deliver ransomware through malicious spam, emails carrying an infected attachment or PDF designed to trick you into opening it. They also use malicious online advertising, which can infect a device with little to no action needed from you.
What Types of Malware Should You Know About?
- Scareware poses as security software or tech support. It shows a pop up claiming it found malware on your device and demands payment to remove it. If you ignore it, the pop ups keep coming, but your files stay safe.
- Screen lockers freeze you out of your device entirely. A full screen window appears, often impersonating an official body, claiming it detected illegal activity and demanding a fine.
- Encrypting ransomware locks you out of your actual files. This is the most damaging type for a business, once attackers have encrypted your files, no security software can restore them.
Should You Pay a Ransomware Demand?
No. Paying gives you no guarantee you’ll get your data back, and it only encourages attackers to target you and others again.
How Can You Protect Your Business From Ransomware?
Investing in cybersecurity prevents most ransomware attacks before they happen. Backing up your data regularly matters just as much, we recommend cloud storage with strong encryption and multi factor authentication built in.
If you’re worried about ransomware or any other cybersecurity risk, get in touch with our team. Our engineers can walk you through the right approach to keeping your business and its data secure.
Disconnect the infected device from your network straight away to stop it spreading, and avoid restarting it or deleting any files. Contact your IT provider immediately so they can assess the damage and begin containment, rather than trying to fix it yourself.
Yes. If personal data is affected, you're required to report the breach to the Data Protection Commission, and you can also report the incident to An Garda Síochána's National Cyber Crime Bureau.
The clearest sign is losing access to files, often renamed with unfamiliar extensions, alongside a ransom note demanding payment to restore them. Sudden system slowdowns or unexplained account lockouts can also be early warning signs.
