Ransomware
Ransomware encrypts data and demands payment to restore access.
Updated: 2026-03-05
Definition
Ransomware is malware that encrypts files or systems and demands a ransom for decryption keys.
Modern ransomware often includes data theft (double extortion) to pressure payment.
Key points
- Encrypts + may exfiltrate data
- Backups and segmentation reduce impact
- Fast containment is critical
Common mistakes
- Backups exist but were never tested or are also encrypted.
- No network segmentation; one host infection spreads.
Related exams
Related terms
Want to practice this in exam-style questions?
Use the mini tests on each exam page, then continue in the app for offline packs and detailed explanations.
Go to exams