Purrfectly Protected
Last time, we covered the scare-screen version of ransomware — a bluff designed to panic you into paying for a "lock" that was never real. This time, we're talking about the version that isn't a bluff at all.
Real ransomware quietly encrypts your actual files — turning documents, photos, and everything else into scrambled data you can't open — and then demands payment for the key to unscramble them. Unlike the scare-screen version, there's no theater here, and closing the browser won't make it go away. The damage is already done by the time you see the message.
Where ransomware actually points these days
Here's something worth knowing, and it's genuinely reassuring: ransomware has largely moved on from targeting individual home users. A regular person's laptop simply isn't a very profitable target — most people don't have the money (or the willingness) to pay a large ransom, and there's rarely anything on a home computer worth that much to hold hostage.
Instead, ransomware today is overwhelmingly aimed at organizations — hospitals, schools, city governments, and businesses of every size. These targets get hit precisely because they can't afford the downtime: a hospital that can't access patient records, or a company that can't process orders, is under enormous pressure to pay quickly just to get back to functioning. That's where the real money is, and that's where attackers have concentrated their effort.
So why does this still matter to you?
A few reasons the shift away from home users doesn't mean you're off the hook:
- Home devices are often the way in. If you work remotely or connect to any organization's network from a personal device, an infection on your end can become the entry point into something much bigger — and much more damaging to people who depend on you.
- Untargeted doesn't mean impossible. A lot of infections still happen opportunistically — through a malicious email attachment, a compromised download, or a fake software update — with no regard for who's on the other end. Being a low-value target reduces your odds; it doesn't eliminate them.
- The backup you don't have is the one you'll need. If it does happen to you, the entire outcome hinges on whether you had a backup made before the infection. Without one, you're choosing between paying criminals with no guarantee of getting your files back, or losing them for good.
The habits that actually matter here
- Keep a real backup of anything irreplaceable, stored somewhere disconnected from your main device — an external drive you unplug, or a cloud backup service. If ransomware can't reach your backup, it can't hold it hostage.
- Don't open unexpected attachments or click links in messages you weren't expecting, even if they look like they're from someone you know — this is still the most common way ransomware gets in.
- Keep your operating system and software updated — many infections rely on security holes that were already patched, just never installed.
- If you ever do see a real ransom message (files genuinely won't open, extensions have changed, and a note is demanding payment), disconnect from the internet immediately to stop it from spreading further, and get help from a professional before doing anything else.
The one habit that covers you either way
Here's the reassuring part: the same handful of habits that protect you from ransomware — backups, updates, and being careful about what you click — are exactly the same habits that protect you from almost everything else on this site. You don't need to treat ransomware as a special, separate threat requiring its own strategy. Good general hygiene already covers it.