Ransom in the digital age: How to protect yourself from cyber extortion

 Introduction

Ransomware is a type of malicious software that encrypts a victim’s files or locks their computer system, making data inaccessible until a ransom is paid to the attacker, usually in cryptocurrency. It is a form of cyber extortion and is part of the broader category of cybercrimes threatening digital security.

How ransomware works

• Delivered through phishing emails, malicious attachments, compromised websites or infected USB drives.
• Once activated, it encrypts critical data and displays a ransom note
• Payments are demanded via anonymous digital channels to evade tracing

  Effects on daily life

• Individual impact: Loss of personal photos, documents, and important data; financial loss if ransom is paid; mental stress and fear of identity theft
• Business impact: Disruption of services, loss of customer data, operational downtime, and reputational damage
• Public services: Hospitals, police databases, and government portals can be paralyzed, affecting citizens’ access to essential services
• National security: Can be used in cyber warfare or to sabotage critical infrastructure (power grids, transport systems)
  Advertisement

  Recent trends and examples

• WannaCry attack (2017): impacted over 150 countries, including hospital networks in the UK.
• Indian context: CERT-In (Indian Computer Emergency Response Team) has reported multiple ransomware incidents targeting small businesses, educational institutions, and government systems.

  Safeguards/prevention strategies

  Advertisement

  At Individual Level

• Avoid clicking suspicious links or downloading unknown attachments
• Keep software and operating systems updated
• Use licensed antivirus and anti-ransomware tools
• Regularly back up important data on offline or cloud storage

   At institutional level

• Implement network segmentation and strong cyber hygiene practices
• Conduct employee awareness programmes
• Adopt multi-factor authentication for sensitive systems

  At government level

• Strengthen CERT-In and National Critical Information Infrastructure Protection Centre (NCIIPC)
• Enforce Information Technology Act, 2000 provisions for cybercrime
• Collaborate internationally for cybercrime intelligence sharing

  Conclusion

Ransomware is not merely a technical issue but a national security and socio-economic challenge. As India moves towards Digital India, strengthening cyber resilience through technology, policy and public awareness becomes essential. A proactive, multi-stakeholder approach can safeguard citizens and institutions from such evolving threats.