{"id":7656,"date":"2020-04-23T08:22:52","date_gmt":"2020-04-23T12:22:52","guid":{"rendered":"https:\/\/www.pair.com\/support\/kb\/?post_type=ht_kb&#038;p=7656"},"modified":"2020-04-23T08:24:28","modified_gmt":"2020-04-23T12:24:28","slug":"ransomware","status":"publish","type":"ht_kb","link":"https:\/\/www.pair.com\/support\/kb\/ransomware\/","title":{"rendered":"Ransomware"},"content":{"rendered":"<h3>What is Ransomware?<\/h3>\n<p><span style=\"font-weight: 400;\">Ransomware is a type of malware (malicious software) that takes away your device access and holds it hostage. Often, the hacker responsible will \"ransom\" device access back to you for a sum of money. There's nothing keeping the hacker from keeping your money and never giving your device access back, though.\u00a0<\/span><\/p>\n<h4>A Note About Ransomware Spam Emails<\/h4>\n<p><span style=\"font-weight: 400;\">A common email spam tactic is to impersonate ransomware.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Many users receive emails claiming that their device has been hacked. The email may claim various things, like they have access to your files or that they have been spying on you through your webcam.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">However, most often this is not the case. If hackers had full access to your device, they would likely use the methods below to try to extort money from you.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You should still do a sweep of your device to make sure the threat is false, but it is unlikely that a hacker with full access to your system would send you an email instead of directly taking control of your device.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To learn more about spam emails, read our <a href=\"https:\/\/www.pair.com\/support\/kb\/email-spam-how-to-identify-it-and-protect-yourself\/\" target=\"_blank\" rel=\"noopener noreferrer\">Email Spam: How to Identify It and Protect Yourself article<\/a>.<\/span><\/p>\n<h3>How Do You Get Ransomware?<\/h3>\n<p><span style=\"font-weight: 400;\">Ransomware can enter your device when you interact with infected files or websites. A common way to accidentally download ransomware is to open a spam email's infected attachment. For some ransomware, all it takes is for someone to open the attachment, then it begins the process of infecting your device.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">We recommend taking extra care with spam emails. Read our <a href=\"https:\/\/www.pair.com\/support\/kb\/email-spam-how-to-identify-it-and-protect-yourself\/\" target=\"_blank\" rel=\"noopener noreferrer\">Email Spam: How to Identify It and Protect Yourself article<\/a> for more information about how to deal with email spam.\u00a0\u00a0<\/span><\/p>\n<h3>Ransomware Types<\/h3>\n<p><span style=\"font-weight: 400;\">There are a few types of ransomware that you can encounter. We go over three of the most common types below:<\/span><\/p>\n<h5>Encryption Ransomware<\/h5>\n<p><span style=\"font-weight: 400;\">Encryption ransomware is what many think of when they hear, \"ransomware.\" This common type of ransomware is the most devastating. It will take the files on the infected computer and encrypt them, making them almost impossible to open.\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/www.cloudflare.com\/learning\/ssl\/what-is-encryption\/\"><span style=\"font-weight: 400;\">Encryption<\/span><\/a><span style=\"font-weight: 400;\"> essentially translates the files into a secret code. To get them back, you need an encryption key to translate the files back to their original (readable) form. Encryption is often used to protect files from prying eyes, like SSL certificates do for website connections. In the case of protective encryption, the encryption key is held by the party that is allowed to decrypt the data. However, ransomware uses encryption to effectively steal your files from you, with the only key being held by the hacker.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For a more thorough look at how ransomware uses encryption, <\/span><a href=\"https:\/\/resources.infosecinstitute.com\/a-brief-summary-of-encryption-method-used-in-widespread-ransomware\/#gref\"><span style=\"font-weight: 400;\">check out this resource by Infosec<\/span><\/a><span style=\"font-weight: 400;\">.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Encryption ransomware can be devastating. Unfortunately, once it takes hold of your computer, it is likely your files are gone. While you could pay the hacker, it's just as likely that they would take your money and give you nothing. <\/span><a href=\"https:\/\/noransom.kaspersky.com\/\"><span style=\"font-weight: 400;\">If the hacker has used an older encryption method, you can find the encryption key online<\/span><\/a><span style=\"font-weight: 400;\">, but more often it's a lost cause. You can read more about the low chances of decrypting ransomware here <\/span><a href=\"https:\/\/www.kaspersky.com\/blog\/undecryptable-files\/26040\/\"><span style=\"font-weight: 400;\">in this Kaspersky resource<\/span><\/a><span style=\"font-weight: 400;\">.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The best way to stop ransomware encryption is to protect yourself from the start. Don't open suspicious spam mail (more on how to do that here) and try not to visit sketchy websites.\u00a0\u00a0<\/span><\/p>\n<h5>Screen Lockers<\/h5>\n<p><span style=\"font-weight: 400;\">Screen lockers are another form of ransomware, but they do not encrypt your files. Instead, they effectively lock you out from your computer. It usually happens when your device starts up. A screen may appear that you cannot click away from, keeping you from accessing the rest of your device. This screen usually relays a message to you with the hackers terms, though sometimes they try to use ploys to get you to pay them money (for example, pretending to be the FBI).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Normally, the screen will provide instructions so that you can pay a sum of money to unlock your device. However, even paying the fee may not result in the removal of the screen locker.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Example: You boot up your computer, but instead of your normal home screen, you see a window that you can't click out of. In fact, your entire computer seems to be frozen on this screen. This screen has the FBI's logo on it and says, \"This the FBI. We've detected illegal activity and have locked your computer. Pay a fine or $500 or risk jail time.\"\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The example above is alarming, but hackers know they can use tactics like this to trick people out of their money. Legitimate government organizations will use the proper, legal protocols to deal with illegal activities, not a screen locker.\u00a0\u00a0<\/span><\/p>\n<h5>Scareware<\/h5>\n<p><span style=\"font-weight: 400;\">Scareware is included in this list because, while it does not actually take away your device access, it <\/span><i><span style=\"font-weight: 400;\">claims<\/span><\/i><span style=\"font-weight: 400;\"> it does.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When most people think of ransomware, they usually envision screen lockers or encryptors. However, instead of actually taking over your device, scareware relies on scaring you into thinking you have ransomware when you actually do not.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Scareware normally appears as a pop up. It may impersonate a popular antivirus software or trusted organization. Many scareware pop ups will tell you that your device is infected and present you with a software to remove it. All you have to do is download it. However, the ransomware doesn't exist and the software they're promoting either doesn't do anything or installs malware or adware onto your computer (for example, encryption ransomware).\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Example: You're using your computer, when suddenly a pop up appears. The pop up says that your computer has been infected by ransomware! Not to worry, though, all you need to do is buy this special software and it will clean the ransomware from your computer. The pop up has a link to the special software that will magically rid your computer of the ransomware.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It's important to remember that legitimate security software will not attempt to contact you this way, unless it is already installed on your device. Even then, it's important to be careful when clicking pop ups to install new software.\u00a0<\/span><\/p>\n<p>Here are a few things that might indicate you have scareware:<\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">You cannot access legitimate antivirus websites<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The pop ups are oddly formatted or look strange<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The pop ups are trying to get you to upgrade to a paid plan (legitimate antivirus does do this, but it's very important to make sure it's the antivirus and NOT scareware)<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The pop ups are telling you false information\/ reporting false problems<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Your computer has been running slower than normal<\/span><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>What is Ransomware? Ransomware is a type of malware (malicious software) that takes away your device access and holds it hostage. Often, the hacker responsible will &#8220;ransom&#8221; device access back to you for a sum of money. There&#8217;s nothing keeping the hacker from keeping your money and never giving your&#8230;<\/p>\n","protected":false},"author":11,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":[],"ht-kb-category":[6],"ht-kb-tag":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.8.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Ransomware - Knowledge Base - Pair Networks<\/title>\n<meta name=\"description\" content=\"Ransomware is a type of malware that takes away your device access and holds it hostage. Learn more about it in this article.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pair.com\/support\/kb\/ransomware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware - Knowledge Base - Pair Networks\" \/>\n<meta property=\"og:description\" content=\"Ransomware is a type of malware that takes away your device access and holds it hostage. Learn more about it in this article.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pair.com\/support\/kb\/ransomware\/\" \/>\n<meta property=\"og:site_name\" content=\"Knowledge Base - Pair Networks\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/pairnetworks\/\" \/>\n<meta property=\"article:modified_time\" content=\"2020-04-23T12:24:28+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@pairNetworks\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/ransomware\/\",\"url\":\"https:\/\/www.pair.com\/support\/kb\/ransomware\/\",\"name\":\"Ransomware - Knowledge Base - Pair Networks\",\"isPartOf\":{\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#website\"},\"datePublished\":\"2020-04-23T12:22:52+00:00\",\"dateModified\":\"2020-04-23T12:24:28+00:00\",\"description\":\"Ransomware is a type of malware that takes away your device access and holds it hostage. Learn more about it in this article.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.pair.com\/support\/kb\/ransomware\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.pair.com\/support\/kb\/ransomware\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/ransomware\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.pair.com\/support\/kb\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ransomware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#website\",\"url\":\"https:\/\/www.pair.com\/support\/kb\/\",\"name\":\"Knowledge Base - Pair Networks\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.pair.com\/support\/kb\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#organization\",\"name\":\"Pair Networks\",\"url\":\"https:\/\/www.pair.com\/support\/kb\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.pair.com\/support\/kb\/wp-content\/uploads\/2022\/02\/Gb_TUkUE_400x400.jpeg\",\"contentUrl\":\"https:\/\/www.pair.com\/support\/kb\/wp-content\/uploads\/2022\/02\/Gb_TUkUE_400x400.jpeg\",\"width\":360,\"height\":360,\"caption\":\"Pair Networks\"},\"image\":{\"@id\":\"https:\/\/www.pair.com\/support\/kb\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/pairnetworks\/\",\"https:\/\/twitter.com\/pairNetworks\",\"https:\/\/www.instagram.com\/pairnetworks\/\",\"https:\/\/www.linkedin.com\/company\/2269676\/\",\"https:\/\/www.pinterest.com\/pairnetworksinc\/pins\/\",\"https:\/\/www.youtube.com\/user\/pairnetworks\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ransomware - Knowledge Base - Pair Networks","description":"Ransomware is a type of malware that takes away your device access and holds it hostage. Learn more about it in this article.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pair.com\/support\/kb\/ransomware\/","og_locale":"en_US","og_type":"article","og_title":"Ransomware - Knowledge Base - Pair Networks","og_description":"Ransomware is a type of malware that takes away your device access and holds it hostage. Learn more about it in this article.","og_url":"https:\/\/www.pair.com\/support\/kb\/ransomware\/","og_site_name":"Knowledge Base - Pair Networks","article_publisher":"https:\/\/www.facebook.com\/pairnetworks\/","article_modified_time":"2020-04-23T12:24:28+00:00","twitter_card":"summary_large_image","twitter_site":"@pairNetworks","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.pair.com\/support\/kb\/ransomware\/","url":"https:\/\/www.pair.com\/support\/kb\/ransomware\/","name":"Ransomware - Knowledge Base - Pair Networks","isPartOf":{"@id":"https:\/\/www.pair.com\/support\/kb\/#website"},"datePublished":"2020-04-23T12:22:52+00:00","dateModified":"2020-04-23T12:24:28+00:00","description":"Ransomware is a type of malware that takes away your device access and holds it hostage. Learn more about it in this article.","breadcrumb":{"@id":"https:\/\/www.pair.com\/support\/kb\/ransomware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pair.com\/support\/kb\/ransomware\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.pair.com\/support\/kb\/ransomware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pair.com\/support\/kb\/"},{"@type":"ListItem","position":2,"name":"Ransomware"}]},{"@type":"WebSite","@id":"https:\/\/www.pair.com\/support\/kb\/#website","url":"https:\/\/www.pair.com\/support\/kb\/","name":"Knowledge Base - Pair Networks","description":"","publisher":{"@id":"https:\/\/www.pair.com\/support\/kb\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pair.com\/support\/kb\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.pair.com\/support\/kb\/#organization","name":"Pair Networks","url":"https:\/\/www.pair.com\/support\/kb\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pair.com\/support\/kb\/#\/schema\/logo\/image\/","url":"https:\/\/www.pair.com\/support\/kb\/wp-content\/uploads\/2022\/02\/Gb_TUkUE_400x400.jpeg","contentUrl":"https:\/\/www.pair.com\/support\/kb\/wp-content\/uploads\/2022\/02\/Gb_TUkUE_400x400.jpeg","width":360,"height":360,"caption":"Pair Networks"},"image":{"@id":"https:\/\/www.pair.com\/support\/kb\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/pairnetworks\/","https:\/\/twitter.com\/pairNetworks","https:\/\/www.instagram.com\/pairnetworks\/","https:\/\/www.linkedin.com\/company\/2269676\/","https:\/\/www.pinterest.com\/pairnetworksinc\/pins\/","https:\/\/www.youtube.com\/user\/pairnetworks"]}]}},"_links":{"self":[{"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb\/7656"}],"collection":[{"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/comments?post=7656"}],"version-history":[{"count":8,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb\/7656\/revisions"}],"predecessor-version":[{"id":7667,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb\/7656\/revisions\/7667"}],"wp:attachment":[{"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/media?parent=7656"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb-category?post=7656"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.pair.com\/support\/kb\/wp-json\/wp\/v2\/ht-kb-tag?post=7656"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}