Ravi Sir's Cyber Security Cards › Revision Cards
Ransomware Deep Dive – Raja-Rani Traders
Ransomware Deep Dive – Raja-Rani Traders Ransomware encrypts your files and demands payment to unlock them. Encryptor : scrambles files. Locker : locks the screen. Double extortion : steal the data first, then encrypt, and threaten to leak it. The best defence is offline, tested backups , so you can
Read card text
What this card says
What it is
Ransomware encrypts your files and demands payment to unlock them.
Types
Encryptor: scrambles files. Locker: locks the screen.
Double extortion: steal the data first, then encrypt, and threaten to leak it.
Why it matters for security
The best defence is offline, tested backups, so you can restore without paying.
Also patch, use MFA, and segment the network to slow spread.
| Red team (attacker) does | Blue team (defender)… |
|---|---|
| Phish → foothold → domain/local admin → encrypt shares +… | EDR ransomware behaviour (mass file rename/encrypt);… |
| Steals files before encrypt (double extortion) | DLP egress alerts; unusual archive+upload; MFA; segment… |
| Targets backups on same network share | Offline / immutable backups; separate backup admin account;… |
Learn more in the lesson: 39.3 Ransomware Deep Dive – Raja-Rani Traders