Ransomware & Malware
One click on the wrong attachment and every file on your computer is encrypted. Photos, documents, family videos β all locked. A screen demands Bitcoin to unlock them. Ransomware is not just a business problem. It targets individuals, families, and small businesses who cannot afford to lose their memories or their livelihoods.
π The Scale
Sources: NCSC Annual Review 2025, NHS Digital, ransomware.live.
π How Ransomware Gets In
The most common method. An email with an "invoice" attachment. You open it. Your files are encrypted.
Fake DPD, Royal Mail, or Amazon tracking link. Tells you to download a PDF to track your parcel.
"Job application" with a ZIP attachment. The file is ransomware disguised as a CV.
Cracked games or software from torrent sites. They install ransomware alongside the file you wanted.
π‘οΈ Protection 3-2-1 Rule
The only sure defence against ransomware is backups. Follow the 3-2-1 rule:
- 3 Three copies of your data (1 original + 2 backups)
- 2 Two different media types (e.g. external hard drive + cloud storage)
- 1 One copy kept offline (disconnected from your computer)
β‘ If You Are Infected
- 1. Disconnect from the internet immediately. Pull the cable or turn off Wi-Fi.
- 2. Do NOT pay the ransom. Paying funds criminal networks and does not guarantee your files back. Only 65% of victims who pay ever get their data restored.
- 3. Report to the NCSC β ncsc.gov.uk/report. They can sometimes help with decryption.
- 4. Report to Action Fraud on 0300 123 2040.
- 5. Restore from your offline backup. This is why you have one.
π Real example β WannaCry (2017): A ransomware attack spread through the NHS. It locked 70,000 devices across 40+ hospital trusts. 19,000 appointments were cancelled. The attack exploited unpatched Windows software. The ransom was Β£230 per device β but the damage was millions. This happened because one organisation did not install a security update. Keep your software updated.