What it is
Ransomware is malware that encrypts files and demands payment to unlock them. Current crews also steal a copy of the data first and threaten to publish it if you refuse.
ExampleWhat it looks like
A single infected workstation spreads overnight. In the morning, shared drives, backups that were left attached, and line-of-business apps are all locked, and a ransom note is on the screen.
WolfTech
How we handle it
We treat ransomware as a stack problem: EDR on endpoints, email security, tested backups that are actually restorable, and an incident plan so you are not making it up at 2 a.m. The goal is you never need the ransom note.
