Ransomware is a form of malware that encrypts a victim's files. The attacker then demands a ransom from the victim to restore access to the
There are several things malware might do once it’s taken over a victim's computer, but by far the most common action is to encrypt some or all of the user's files. At the end of the process, the files cannot be decrypted without a mathematical key known only by the attacker. The user is presented with a message explaining that their files are now are now inaccessible and will only be decrypted if the victim sends an untraceable Bitcoin payment to the attacker. The attacker might claim to be a law enforcement agency shutting down the victim's computer due to the presence of pornography or pirated software on it, and demanding the payment of a "fine," perhaps to make victims less likely to report the attack to authorities. There is also a variation, called leakware or doxware, in which the attacker threatens to publicise sensitive data on the victim's hard drive unless a ransom is paid.
