What Should You Do When Files Are Encrypted by Ransomware?

[trentonhogan]

In case of File encryption by ransomware, do not panic or delete the encrypted files right away. It is recommended to disconnect the affected machine from the network to reduce the risk of spreading, while checking other computers or shared storage to see if they are also affected. It is recommended to keep a few copies of the encrypted files as well as the ransom note since this information can help to understand the type of ransomware that is used. Then, it should be checked if there are clean or offline/cloud backups available, which are made prior to the ransomware attack. There can also be free decryptors available from security companies, which are released for specific families of ransomware, and that is why identification is an important step.

[Author]

Posts