By Ivo Pereira | Web Developer & Cybersecurity Enthusiast
Introduction
Hey there! I’m Ivo Pereira—a computer science student and web developer with a serious interest in building secure, modern tech. With cyberattacks becoming more common, one term that keeps popping up is ransomware. It’s one of the most dangerous forms of cybercrime out there—and it doesn’t just target big businesses. Anyone can be a victim.
In this post, I’ll break down ransomware in a way that’s simple, clear, and useful—whether you’re a student, a developer, or just someone who wants to stay safe online.
What is Ransomware?
Ransomware is a type of malware that encrypts your files or locks your entire system, making it unusable. The attacker then demands a ransom payment, usually in cryptocurrency, in exchange for a decryption key to unlock your data.
Think of it like this: someone breaking into your house, changing all the locks, and asking you to pay to get back in. Worst part? Even if you pay, they might not hand over the keys.
How Does Ransomware Work?
Let’s walk through the usual process:
1. Infection
The attacker finds a way in through:
- 📨 Phishing Emails: Fake emails with links or attachments.
- 💻 Malvertising: Fake ads that install malware when clicked.
- 🌐 Compromised Websites: Drive-by downloads without your knowledge.
- 🔓 RDP Attacks: Brute-forcing weak remote desktop connections.
2. Execution
Once inside your system, the malware:
- Gains admin privileges
- Encrypts files using strong algorithms
- Often spreads to other connected devices
3. Ransom Demand
A message appears on your screen demanding payment and giving you a deadline. Sometimes, they even offer to decrypt one file as a “sample of goodwill.”
4. The Aftermath
Victims are left with three choices:
- Pay the ransom (not recommended)
- Recover from backups (if they exist)
- Lose access to their data permanently
Types of Ransomware
- 🔒 Crypto Ransomware – Encrypts your files
→ Examples: WannaCry, Locky - 🔐 Locker Ransomware – Locks the entire device
→ Used in fake law enforcement pop-ups - 🕵️ Double Extortion – Steals and encrypts data; threatens to leak it
→ Examples: Maze, REvil - 🧰 Ransomware-as-a-Service (RaaS) – Ransomware tools sold on dark web
→ Examples: DarkSide, Conti
Real Incidents That Shook the Internet
- WannaCry (2017): Paralyzed hospitals and companies in 150+ countries.
- Colonial Pipeline (2021): Disrupted fuel supply in the U.S.
- Kaseya (2021): Supply-chain attack that affected thousands of businesses.
How to Protect Yourself (and Your Organization)
Let’s get to the good part: defense.
🔁 1. Backups
- Use the 3-2-1 rule: 3 copies, 2 different formats, 1 stored offline.
- Cloud backups are great—but make sure they’re not always connected.
✉️ 2. Email Safety
- Think twice before clicking links or opening unknown attachments.
- Run phishing simulations if you’re in a team environment.
💻 3. Keep Systems Updated
- Always apply updates and patches.
- Don’t ignore “Update Available” prompts!
🛡️ 4. Antivirus + EDR
- Use reliable security software with behavior-based detection.
- Consider Endpoint Detection & Response (EDR) tools for deeper protection.
🔐 5. Access Control
- Use MFA (Multi-Factor Authentication) everywhere—especially for admin accounts.
- Follow the least privilege principle—only give users what they need.
🌐 6. Secure Your Network
- Segment networks to contain any breach.
- Use firewalls, VPNs, and secure DNS filtering.
📝 7. Have a Response Plan
- Know exactly what to do if an attack happens.
- Keep offline contacts for IT, cybersecurity support, and local cyber law enforcement.
Should You Pay the Ransom?
Honestly, no. Most cybersecurity experts and law agencies (like CERT-In, CISA, and Interpol) strongly recommend against it.
Why?
- No guarantee you’ll get your files back
- Your money funds criminal operations
- Encourages attackers to strike again
Instead, isolate the infected system, report the incident, and begin recovery using backups.
Final Thoughts
Ransomware is scary, but it’s not unbeatable. Most attacks succeed not because of super-advanced hacking—but due to small human errors or outdated systems. So if you stay alert, keep things updated, and have a solid backup strategy, you’ll already be way ahead of most targets.
As someone who builds apps with a focus on security, I truly believe in this one thing:
Prevention is always better (and cheaper) than cure.
So take care of your digital space like you would your home—lock the doors, install an alarm, and don’t let just anyone in. Stay safe out there!