Safety Instinct

Navigation


Articles · Ransomware · 2 min read

What is ransomware?

Ransomware is malware that locks your files and demands payment to unlock them. It runs in four steps:

Illustration of important documents locked on a computer
1

It gets in

Through the usual doors

A malicious attachment, a bad link, or a fake download slips onto your device — the same ways any malware arrives. Nothing looks wrong yet.

2

It encrypts

Your files, quietly scrambled

In the background it locks your photos, documents, and even your backups, rewriting them so only the attacker's key can open them again.

3

The demand

Pay, and hurry

A screen takes over asking for money, usually in cryptocurrency, with a countdown timer meant to panic you into paying before you think it through.

4

The trap

Paying rarely gets your files back

Handing over the money funds the crime and often returns nothing — no key, or a broken one. A recent backup, kept separate from your device, is the only reliable way out. That's ransomware — and a recent backup is worth more than any decryption key.

Also worth knowing

Illustration of malware hidden inside fake software

Malware · 2 min

What is malware?