Ransomware
Ransomware is malicious software or a cyberattack that restricts access to data or systems, typically to extort payment or another concession.
Data-Driven Cybersecurity
Ransomware is malicious software or an attack operation that denies access to data or systems, typically to extort payment.
- How it is used
- Frames a leading attack vector as a data-protection and recovery risk and a scenario for incident-response planning.
- How deep it goes
- Defines encryption and extortion tactics, then walks through response decisions in a tabletop scenario without detailing malware internals.
- Examples
- Uses a four-day tabletop scenario involving encrypted customer data, a ransom demand, a journalist’s inquiry, and restoration from backups.
- What you can do after
- Practice/perform response planning for a ransom demand, containment, stakeholder communication, backup restoration, and lessons learned.
Grokking Web Application Security
Ransomware is malicious software that blocks access to data, commonly by encrypting files, until a ransom is paid.
- How it is used
- Frames ransomware as a profitable consequence of compromised web servers and injection vulnerabilities.
- How deep it goes
- Defines encryption-based extortion and explains affiliate deployment through malicious-code injection without detailing malware internals.
- Examples
- Uses attacks against oil pipelines, healthcare providers, meat suppliers, hotel chains, and vulnerable servers.
- What you can do after
- Evaluate/understand how a server compromise can become ransomware extortion and prioritize preventive development practices.
Read how Grokking Web Application Security explains ransomware →
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
Ransomware is malware that encrypts files or otherwise restricts access and demands payment for restoration.
- How it is used
- Classifies ransomware as a malware-based security threat and highlights cautious handling of attachments and websites.
- How deep it goes
- Defines encryption, payment, and common delivery vectors but stops short of recovery procedures or technical implementation details.
- Examples
- Uses encrypted files, cryptocurrency payment demands, email attachments, and malicious websites as concrete examples.
- What you can do after
- Evaluate whether malware behavior matches ransomware and recognize common delivery routes requiring user caution.
Read how Acing the CCNA Exam: Volume 2 Advanced Networking and Security explains ransomware →
AI for Everyday IT
A ransomware attack is a cyberattack that denies access to data or systems, typically by encrypting them, to coerce payment or another concession.
- How it is used
- Supports leaders who must coordinate questions, communication, and decisions during a ransomware crisis.
- How deep it goes
- Provides a practical first-response checklist but stops short of technical recovery, decryption, or forensic procedures.
- Examples
- Uses a company-wide encryption and outage scenario involving a VP, IT director, CTO, and replicated data.
- What you can do after
- Diagnose initial scope and coordinate informed conversations with technical leaders during an active attack.
Related concepts
- encryptionuses · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.
- malicious codekind of · Malicious code is software or executable content intentionally designed to perform unauthorized, harmful, disruptive, deceptive, or security-compromising actions.
- lateral movementproduced by · Lateral movement is an attacker's progression from a compromised system, account, or resource to additional systems, accounts, or resources within an environment.
- backup and restoreaddressed by · Backup and restore is the practice of preserving copies of data or system state and using them to recover it after loss, damage, or failure.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.