SESK: Stuff Everyone Should Know · sesk.info/tech-ransomware-encryption
What does file-encrypting ransomware do before demanding payment?
It encrypts the victim's data to deny normal access.
- Adds redundant disks
- Publishes a software patch
- Encrypts the organization's data ✔
Why: Ransomware transforms usable data into ciphertext and then demands payment for restored access. Some operators also steal data and threaten disclosure.
Huh, didn't know that: Theft plus an encryption demand is commonly called double extortion.
Ransomware is terrible at sharing because it locks every file cabinet.
Like this card?
References
Answer: Encrypts the organization's data. Ransomware transforms usable data into ciphertext and then demands payment for restored access. Some operators also steal data and threaten disclosure.
- NIST IR 8374 Rev. 1 csrc.nist.gov/pubs/ir/8374/r1/final
Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access.
Checked 2026-10-10.
Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.
More stuff everyone should know
That's stuff everyone should know.