Ransomware

Warning signs

• You get an email or instant message that looks phishy. Phishing is the most common method hackers use to spread ransomware, so be wary of messages that appear to come from a trusted source, such as a friend, a coworker or your bank, but seem off in some way (for example, the grammar is suspiciously bad or the sender’s address looks wrong).
• A pop-up on your computer or mobile device warns of viruses, promises a prize or redirects you automatically to another site.
• An email with a Microsoft Word document attached asks you to “enable macros” or “enable content.” Opening the attachment or following the enable instructions allows the file to download ransomware or other malicious software onto your computer.

How to protect yourself from this scam

• Do set your computer operating system, web browser and security software to update automatically so you’re always protected against the latest threats.
• Do back up all of your important data. You can do so to a portable drive, but also consider signing up for a cloud-based service that automatically backs up your files and saves previous versions so can get them back unencrypted.
  
• Do unplug portable drives from your computer when not in use, to lessen the chances that they, too, will be encrypted in a ransomware attack.
  
• Do use an ad-blocker program or browser extension, to help protect your device from malware planted in web ads.
  
• Do disconnect an infected computer from your home or office network, to prevent ransomware from spreading to other devices.
  
• Do be especially vigilant if you’re working from home. Home computers and networks may have more security vulnerabilities than company systems directly managed by IT staff.
  

• Don’t click links in emails without first checking them out. Hover your cursor over the link, so you can see if the internet address, or URL, looks suspicious.
• Don’t open an email attachment unless you’re expecting a file from someone and you know it’s safe.
  
• Don’t click on pop-up ads offering free software products that remove malware from your computer. Some ransomware developers use pop-ups to transfer their programs.
  
• Don’t go to websites that contain pornography, pirated movies or other unsavory stuff. Crooks often plant malware in those places.
  
• Don’t pay a ransom to online crooks if your computer is attacked. They may just up the price, then destroy your data or leave it encrypted.

More Resources

• Report ransomware attacks to the FBI's Internet Crime Complaint Center (IC3), an FBI field office in your area or the U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA).
• Forward phishing emails to the Federal Trade Commission at ReportFraud.ftc.gov.