Changes

[[File:Ransomware-Torrentlocker.jpg|thumbnail|A deceptive ransom demand from TorrentLocker]]

[[File:Ransomware-Torrentlocker.jpg|thumbnail|A deceptive ransom demand from TorrentLocker]]

'''Ransomware''' is a type of malicious [[software]] ([[malware]]) used for cybercrime which attempts to prevent user access to something they value, usually digital information on their [[computer]].  It will then demand that a ransom be paid so that the user can regain access.<ref>https://www.microsoft.com/en-us/security/portal/mmpc/shared/ransomware.aspx</ref>  In most cases, ransomware will [[encrypt]] all of the information on a computer's writable drives, and change the bootloader so that when the computer is started, the malware is launched.  It will state the demands, and explain how the ransom can be paid.  In some cases, it will claim to be from law enforcement, or claim that the operating system license has expired.  In any case, it will demand payment to regain access to the system and/or files.<ref>http://whatis.techtarget.com/definition/ransomware-cryptovirus-cryptotrojan-or-cryptoworm</ref>  Once paid, the ransomware publisher promises to send the user a decryption key, which can be entered to decrypt the drive(s). However, in some cases, the publisher takes the money without providing the promised key.<ref>https://heimdalsecurity.com/blog/what-is-ransomware-protection</ref>

'''Ransomware''' is a type of malicious [[software]] ([[malware]]) used for cybercrime which attempts to prevent user access to something they value, usually digital information on their [[computer]].  It will then demand that a ransom be paid so that the user can regain access.<ref>https://www.microsoft.com/en-us/security/portal/mmpc/shared/ransomware.aspx</ref>  In most cases, ransomware will [[encrypt]] all of the information on a computer's writable drives, and change the bootloader so that when the computer is started, the malware is launched.  It will state the demands, and explain how the ransom can be paid.  In some cases, it will claim to be from law enforcement, or claim that the operating system license has expired.  In any case, it will demand payment (usualy in the form of [[Bitcoin]]) to regain access to the system and/or files.<ref>http://whatis.techtarget.com/definition/ransomware-cryptovirus-cryptotrojan-or-cryptoworm</ref>  Once paid, the ransomware publisher promises to send the user a decryption key, which can be entered to decrypt the drive(s). However, in some cases, the publisher takes the money without providing the promised key.<ref>https://heimdalsecurity.com/blog/what-is-ransomware-protection</ref>

==Evolution==

==Evolution==