Attack Types

Ransomware

Malicious software that encrypts data and demands ransom

Ransomware is a type of malicious software that encrypts victim's files or blocks access to the system, demanding ransom for restoring access. One of the most destructive modern cyber threats.

Notable Families

  • WannaCry (2017) — infected 200,000+ computers
  • NotPetya (2017) — $10 billion in damages
  • REvil/Sodinokibi — attacks on large businesses
  • LockBit — Ransomware-as-a-Service
  • Conti — attacks on critical infrastructure

How It Spreads

  • Phishing emails
  • RDP attacks
  • Software vulnerabilities
  • Malvertising
  • Infected websites

Protection

  • Regular backups (3-2-1 rule)
  • Software updates
  • Network segmentation
  • EDR solutions
  • Employee training

Related Terms

Category

DDoS, phishing, malware, social engineering