What does file-encrypting ransomware do before demanding payment?

It encrypts the victim's data to deny normal access.

Start playing free

  1. Adds redundant disks
  2. Publishes a software patch
  3. Encrypts the organization's data ✔

Why: Ransomware transforms usable data into ciphertext and then demands payment for restored access. Some operators also steal data and threaten disclosure.

Huh, didn't know that: Theft plus an encryption demand is commonly called double extortion.

The dad joke
Ransomware is terrible at sharing because it locks every file cabinet.
Like this card?
Play the game

References

Answer: Encrypts the organization's data. Ransomware transforms usable data into ciphertext and then demands payment for restored access. Some operators also steal data and threaten disclosure.

  1. NIST IR 8374 Rev. 1 csrc.nist.gov/pubs/ir/8374/r1/final
    Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game