Ransomware is a type of malware that blocks access to a computer system or specific data by encrypting it. The attackers then demand a ransom to unlock access.
Key measures include the use of firewalls, anti-virus software, regular updates, staff training on phishing and regular back-ups.
Immediately isolate affected systems to stop the spread of malware, stop making payments and contact IT or external cyber security specialists to begin recovery.
It is generally not advisable to pay a ransom. There is no guarantee that the data will be released and it helps the attackers in their criminal activities.
Ransomware attacks are on the rise worldwide, affecting organisations of all sizes and in all industries. Organisations in the healthcare, financial and critical infrastructure sectors are particularly susceptible, but small and medium-sized businesses are also increasingly being targeted.