CyberGuard dictionary / Malware
Ransomware
Malware used to deny access to data or systems and demand payment or another concession.
In simple terms
Ransomware can lock files or systems and then demand money.
Technical explanation
Operators may encrypt data, steal it for extortion, or disrupt services; recovery may require containment, clean restoration, and incident response.
Modern incidents may combine encryption with theft and pressure to publish data. Response therefore has to examine both service restoration and possible disclosure, while verifying that restored systems no longer contain the entry point.
Examples in practice
A business loses access to shared files after an employee opens a malicious attachment.
A manufacturer restores its file server from an offline backup, but investigators also review outbound traffic and compromised accounts. Restoring files alone would not answer whether customer documents were copied.
Why it matters
Backups, access limits, updates, and incident preparation can reduce impact.
VERIFY & LEARN MORE
Sources and further reading
Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.