A Ransomware is a malware that blocks user access to the computer or encrypts certain files and asks for a ransom, almost always charged in bitcoins. It is common to hear that ransomware are “computer hijackers”.

There are ransom-like malware that encrypts folders and personal files (documents, spreadsheets, photos and videos), others that block the computer screen, there are still those that encrypt the entire disk or a considerable number of files, and in addition, there are variants for mobile devices, especially Android, through fake applications.

Typically, an infection starts through an email with an executable attachment (.exe), a compressed file (.zip), an Office document with macros, and other files that process actions on your computer. The attachment is opened by the computer owner and the malware runs. But ransomware can also be distributed through websites, which when the visitor accesses is infected without realizing it.

On unprotected computers (without antivirus), malware operates silently until encryption is complete. Then it’s as noisy as possible: it crashes the actions on the PC and shows a message informing you that the data has been blocked and prompts you for the ransom payment.