Cybercriminals have been using ransomware for years and it’s now a global problem. The schemes have become more sophisticated, difficult to spot and harder to protect against. Ransomware is malware (malicious software) designed to prevent or limit users from accessing their systems by encrypting files or blocking access to the computer. Common ransomware demands payment in exchange for the decryption key to unlock your files or systems.
There are many ways you can get infected by ransomware, some of the ways include:
- Opening file attachments that you weren’t expecting or from people you don’t know.
- Visiting unsafe, suspicious, or fake websites.
- Opening malicious or bad links in emails, Facebook, Twitter, and other social media posts, or in instant messenger or SMS chats.
Fortunately, there are steps you can take to help keep your PC secure:
- Make sure your PC is up to date with the latest version of Windows and all the latest patches.
- Be sure Windows Security is turned on to help protect you from viruses and malware (or Windows Defender Security Centre in previous versions of Windows 10).
- In Windows 10 or 11 turn on Controlled Folder Access to protect your important local folders from unauthorized programs like ransomware or other malware.
- Get ransomware detection and recovery with Microsoft 365 advanced protection.
- Back up your files with File History if it hasn’t already been turned on by your PC’s manufacturer.Learn more about File History.
- Store important files on Microsoft OneDrive. OneDrive includesbuilt in ransomware detection and recovery as well as file versioning so you can restore a previous version of a file. And when you edit Microsoft Office files stored on OneDrive your work is automatically saved as you go.
- Use a secure, modern, browser such as Microsoft Edge.
- Restart your computer at least once a week. This can help ensure the applications and operating system are up-to-date and helps your system run better.
If you think your device has been infected, visit Virus & threat protection in Windows Security for how to scan your device.
If your device is infected by ransomware, then speak to your IT provider immediately and they can help you to resolve the issue.
It’s important you don’t pay the ransom, as there’s no guarantee they will give you access to your files, and they may have made a copy and hold you to ransom again later.
If you’ve already paid, then contact your bank immediately as well as your local authorities. If you paid using a credit card, your bank may be able to block the transaction and retrieve your money.