Ransomware is malicious software that encrypts files or blocks access to a device and demands payment. Criminals may also steal data and threaten to publish it.

• Suspicious links or attachments.
• Malicious websites or untrusted applications.
• Infected USB devices.
• Compromised accounts or online sessions.

• Locked files, unfamiliar extensions, disabled security tools, or a ransom note are warning signs.
• Keep software updated, use security protection, enable multi-factor authentication, restrict permissions, and back up important data.
• If attacked, record the details, disconnect the device and other devices from the network, and change important passwords from a clean device. Do not assume payment guarantees recovery.