Malware that encrypts a victim's files and demands payment in exchange for the decryption key.
Ransomware attacks have become one of the costliest categories of cybercrime. Incident response for ransomware involves containment, determining the scope of encryption, and deciding on recovery strategy.
