Being locked out of your own data.
WHAT HAPPENS
Files are encrypted and payment is demanded to restore them.
Sometimes data is also taken, with a threat to publish it.
HOW IT ARRIVES
Frequently through a compromised account or an unpatched system.
Occasionally through an attachment.
WHAT IT AFFECTS
Whatever the compromised account or device could reach.
Including connected storage and network drives.
THAT POINT MATTERS
A backup connected to the affected machine is encrypted with everything else.
WHAT ACTUALLY PROTECTS YOU
Backups kept offline or otherwise separated Backups tested Limited permissions, so one account cannot reach everything Updates
WHETHER TO PAY
Payment does not guarantee recovery, funds further attacks, and may carry legal consequences.
Take advice before considering it.
WHAT TO DO IF IT HAPPENS
Disconnect affected systems Do not attempt to work around it Establish what backups exist and whether they are clean Take advice
WHAT PREVENTS THE WORST OUTCOME
A tested, separated backup.
