Imagine: you received an email with the subject "Special conditions for company employees" and a file attached, and the sender is your employer.
You click on the document, but instead of bonuses and discounts, you receive encryption of all files saved on your computer.
Ransomware can search for files not only on local drives but also on network drives, and will also attempt to spread across the network.
However, ransomware often leaves system files alone, allowing the operating system to continue running and the user to see that dreaded ransom note.
There are several types of ransomware based on their impact:
⏺Ransomware – encrypts files on the victim's computer and demands a ransom;
⏺Lockware (WinLocker) – locks the system and displays a ransom note, while user files remain untouched;
⏺Trojans – infect the main boot record (MBR) so that the operating system cannot boot. They demand a ransom from the user.