What is Ransomware and the Differences Between it and Malware and Virus
The words "malware", "virus" and "ransomware" are often used as if they meant the same thing. They do not, and the difference matters when you decide how to protect yourself.
The differences
- Malware is the general term for any malicious software. Everything below is a kind of malware.
- A virus is malware that attaches itself to files or programs and spreads when they are run or shared.
- Trojans and keyloggers hide inside something that looks harmless and quietly steal data, for example by recording what you type, in the hope that someone enters a password or card details.
- Ransomware is malware that does not wait for luck. It encrypts your files and presents a simple ultimatum: pay, or lose access to your documents, photos and records.
That directness is what makes ransomware so damaging. Attackers keep improving it to get past antivirus protection, because for them it is a lucrative business, and a single successful attack can lock up an entire system in minutes.
Should you pay?
Paying is no guarantee that you will get your files back: the attackers may never send the key, or it may not work. It also funds the next attack. Security agencies generally advise against paying. It is usually better to spend the money on professionals who may be able to restore your data, and to report the attack.
How to defend yourself
- Use reliable antivirus software and keep it active and up to date.
- Back up everything that matters, on an external drive or in the cloud, and keep at least one copy disconnected. With a good backup, ransomware becomes an inconvenience rather than a disaster.
- Keep your system and programs updated, since attackers often use known, already-fixed weaknesses.
- Be careful with email. It is one of the most common ways in: an infected attachment or a link in a convincing letter.
Where temporary mail helps
The fewer places know your real address, the fewer suspicious letters reach it. A temporary mail box for one-off sign-ups keeps your real inbox off many mailing lists, so it receives less spam, and a dangerous letter has fewer chances to get in. It does not scan or clean letters, though: whatever inbox you use, do not open attachments you did not expect.
If it happens
Disconnect the affected computer from the network straight away, do not delete anything, and contact a specialist. Then restore from a clean backup. As we rely more and more on computers and the internet, attackers will keep trying; good habits and backups are what make their efforts fail.