Ransomware

Ransomware attacks are on the rise in Australia. Learn how to protect yourself against it and secure your devices.

What is ransomware?
Ransomware is a common and dangerous type of malware. It works by locking up or encrypting your files so you can no longer access them. A ransom, usually in the form of cryptocurrency, is demanded to restore access to the files. Cybercriminals might also demand a ransom to prevent data and intellectual property from being leaked or sold online.

The effects of ransomware
Ransomware can cause severe damage to both individuals and organisations. You could face significant downtime while you restore your devices and data to their original state. If you don’t have a backup, it could be impossible to recover your files. Downtime or data loss can hurt your reputation, and cost you money.

What to look for
Ransomware can infect your devices in the same way as other malware or viruses. For example:

• visiting unsafe or suspicious websites
• opening emails or files from unknown sources
• clicking on malicious links in emails or on social media.

Common signs you may be a victim of ransomware include:

• pop-up messages requesting funds or payment to unlock files.
• you cannot access your devices, or your login doesn’t work for unknown reasons.
• files request a password or a code to open or access them.
• files have moved or are not in their usual folders or locations.
• files have unusual file extensions, or their names or icons have changed to something strange.

ACSC advice

Never pay a ransom
There is no guarantee you will regain access to your information, nor prevent it from being sold or leaked online. You may also be targeted by another attack. The practical guides below will help you to protect yourself against ransomware attacks and tell you what to do if you’re held to ransom.

If you get stuck
Call the Australian Cyber Security Centre 24/7 Hotline on 1300 CYBER1 (1300 292 371) if you need help, or contact an IT professional for assistance.