{"id":26746,"date":"2022-04-25T12:08:00","date_gmt":"2022-04-25T10:08:00","guid":{"rendered":"https:\/\/perseus.de\/ransomware\/"},"modified":"2026-03-30T11:05:58","modified_gmt":"2026-03-30T09:05:58","slug":"ransomware","status":"publish","type":"post","link":"https:\/\/perseus.de\/en\/ransomware\/","title":{"rendered":"Ransomware"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Ransomware\n<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Refers to extortionate malware<\/a>. Cybercriminals use ransomware to make files, hard drives, computers or entire networks inaccessible to their legitimate users and demand a ransom to release the files, etc. The term is made up of the English words “ransom” for ransom and “-ware” as a word part of software, i.e. program. <\/p>

<\/h4>

What does ransomware mean in detail?<\/h4>

Ransomware attacks are currently on the rise. Cybercriminals have identified companies, authorities and administrations as worthwhile targets for themselves. Increasingly, complex, individualized attacks on companies are being observed. Cybercriminals take a targeted and often multi-stage approach. With seemingly everyday cyber incidents<\/a> such as spam<\/a> , they gain access to the corporate network. Then they research the IT infrastructure in order to encrypt particularly important or sensitive data in a targeted manner \u2013 or the entire system, including connected backups<\/a>. This approach allows the extortionists to exert greater pressure on the affected companies and demand higher ransoms. Paying the ransom is the desired endpoint of the cybercriminals’ activities.
Whether they release the encrypted data or systems afterwards is therefore always uncertain. Some ransomware programs don’t have any intended decryption, which means that the data remains encrypted even after a ransom payment is made.
In the case of the well-known WannaCry ransomware, ransom payments could not be assigned due to a programming error. As a result, no corresponding decryption of the data took place.
A second, higher ransom demand can also be part of the cybercriminals’ concept.
Technically, ransomware is a Trojan.<\/a> Ransomware can be transmitted in several ways, including via infected email attachments, compromised websites, infected USB sticks and hard drives, network security vulnerabilities, and drive-by<\/a> downloads. <\/p>

<\/h3>

Where do I encounter the topic of “ransomware” in my everyday work?<\/h4>

Potentially, you will encounter it with every email with an attachment, with every email with a link and in many other places in your everyday work. For example, in the case of seemingly lost or forgotten USB sticks, when transferring data to customers’ external hard drives, when downloading a supposedly important update<\/a> to be able to watch a video on the Internet. In all these places, you can keep great damage away from your company with your prudence. <\/p>

<\/h3>

What can I do to improve my security?<\/h4>

Within the framework of this glossary, we can only provide suggestions and insights. Please discuss and create a comprehensive procedure with your IT department or with an external IT security service provider such as Perseus. <\/p>

<\/strong><\/p>

Preventive<\/strong><\/p>

Nearly all measures to reduce your organization’s cyber risk<\/a> also reduce the risk of ransomware attacks. These measures include, but are not limited to: <\/p>