Ransomware
Malware that encrypts files on a computer and demands a ransom in cryptocurrency for decryption.
Ransomware encrypts files on a device or network and demands a ransom – usually in Bitcoin or Monero – for decryption. NCSC advises: never pay, as even after payment full recovery rarely happens.
Protection
- Regular offline backups (3-2-1 rule)
- Antivirus with ransomware protection (e.g. Bitdefender, Kaspersky)
- Always install Windows updates
Why this matters in 2026
Ransomware attacks evolved in 2026: instead of just encrypting data, many gangs also threaten to publish it ("double extortion"). NCSC advises never paying – full recovery rates stay below 60% even after payment. Swiss SMEs are particularly exposed because backup strategies are often missing.
How to protect yourself
Three pillars: (1) Regular offline backups following the 3-2-1 rule (3 copies, 2 media, 1 off-site). (2) Antivirus with a dedicated ransomware module (Bitdefender, Kaspersky, Norton). (3) Up-to-date patches – ransomware almost always exploits known vulnerabilities. If it strikes: disconnect immediately, do not pay, report to NCSC (report.ncsc.admin.ch).