Ransomware explained — protect your data from lockouts

Note: This site may show light ads and occasional affiliate links. How that works.

Ransomware locks your files and asks for money. That is the whole trick. It is not clever theatre. It is a padlock on the wrong side of the door, with a note taped to it.

I see the same pattern in small places: someone clicks a rushed attachment, or a fake “invoice” lands while the shop is busy. A few hours later the till laptop will not open the shared folder, and the backup turns out to be the same drive that just got encrypted.

What it looks like on an ordinary Tuesday

Files rename themselves. Documents will not open. Sometimes a full-screen message appears with a countdown and a cryptocurrency address. Sometimes there is no message at all — just silence where your photos or invoices used to be.

Paying does not guarantee a key. Paying can also mark you as someone who pays. I am not going to pretend there is a neat answer once you are already locked out. The useful work happens earlier.

What actually helps

Backups you can restore from cold — a copy that is not plugged in all day
Test a restore once, even if it feels tedious
Updates — old flaws are how a lot of this still arrives
Admin rights sparingly — daily browsing does not need the keys to the kingdom
Attachment suspicion — unexpected zip files and “enable macros” documents are still common

At the moment of risk

Stop! Pause! Is it urgent? Do you know who it is from? Is it really from who it says it is? Unexpected attachment plus pressure to open it fast — that is when to delete and verify by phone instead.

A self-check

Where are your important files backed up — and when did you last check you could actually get them back? If the honest answer is “not sure” or “never tried,” that is this month’s job before anything goes wrong.