← Back to glossary

🔒

Ransomware

Threats

Incident Response (IR) Malware Data Breach

Extortion malware using encryption and operational disruption.

Definition

Ransomware encrypts data or disables systems to extort payment, and many campaigns also exfiltrate data to increase pressure (“double extortion”).

In plain English Extortion malware using encryption and operational disruption.

Why this matters

Why it matters: It threatens availability and confidentiality of personal and organizational data.

Example

Example: Network ransomware encrypts shared drives and leaks stolen data if unpaid.