--- title: Let’s Talk Ransomware description: Users may encounter this threat through a variety of means. Ransomware can be downloaded by unwitting users by visiting malicious or compromised websites. --- [![Logo The AME Group](https://blog.theamegroup.com/hs-fs/hubfs/AMEGroup_Basic_Logos-01-1.png?width=600&height=237&name=AMEGroup_Basic_Logos-01-1.png "Logo The AME Group")](https://www.theamegroup.com/) Open main menu Close main menu - [Contact Us](https://www.theamegroup.com/contact/) [Locky](https://blog.theamegroup.com/tag/locky) [encrypt](https://blog.theamegroup.com/tag/encrypt) [ransomware](https://blog.theamegroup.com/tag/ransomware) [payload](https://blog.theamegroup.com/tag/payload) # Let’s Talk Ransomware [The AME Group](https://blog.theamegroup.com/author/the-ame-group) [Share this blog post on Twitter](https://twitter.com/intent/tweet?text=I+found+this+interesting+blog+post&url=https://blog.theamegroup.com/lets-talk-ransomware) [Share this blog post on Facebook](http://www.facebook.com/share.php?u=https://blog.theamegroup.com/lets-talk-ransomware) [Share this blog post on LinkedIn](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.theamegroup.com/lets-talk-ransomware) *Written by Dwayne Adams, AME Engineer* Have you heard of Locky? It’s a cheery-sounding name, but it’s also a nickname of a new strain of Ransomware, which is a growing problem for all. This type of malware prevents or limits users from accessing their system. It forces its victims to pay the ransom through certain online payment methods in order to grant access to their systems or to get their data back. Some ransomware encrypts files (called Cryptolocker). Other types use [TOR](https://www.theguardian.com/technology/2013/nov/05/tor-beginners-guide-nsa-browser)to hide C&C communications (called CTB Locker). ## How Does Ransomware Find You? Users may encounter this threat through a variety of means. Ransomware can be downloaded by untrained users visiting malicious or compromised websites. It can also arrive as a payload, either dropped or downloaded by other malware. Some ransomware is delivered as attachments to spammed email! ## What does it do to your computer? Once executed in the system, ransomware can either (1) lock the computer screen or (2) encrypt predetermined files with a password. In the first scenario, ransomware shows a full-screen image or notification, which prevents victims from using their system. This also shows the instructions on how users can pay for the ransom. The second type of ransomware locks files like documents, spreadsheets, and other important files. Please feel free to share this with your staff as this could happen to anyone surfing the internet or checking email. Additionally, you could use this as a reminder for all users to save their work to their Home drives (H:\\) instead of a backed-up location. If you suspect someone has a Ransomware infection on their machine immediately turn off the power and disconnect it from the network, then contact your IT department or personnel. In nearly all cases we’ve worked with so far, the root cause was a spam email opened from one computer that encrypted other workstations and servers on the network. **Here are some useful links if you’d like to read into greater detail on the subject.** http://blog.imperva.com/2016/03/the-secret-behind-cryptowalls-success-key-findings-from-our-hacker-intelligence-initiative-report.html http://www.trendmicro.com/vinfo/us/security/definition/Ransomware [Contact The AME Group today](http://www.theamegroup.com/contact/), we can protect you and your business from Ransomware or any kind of IT threats. ![The AME Group](https://blog.theamegroup.com/hubfs/AME%20Branding/AME%20Issuu.png) #### The AME Group From the collective intelligence of The AME Group #### The AME Group - [About AME](https://www.theamegroup.com/company/about-ame/) - [Management](https://www.theamegroup.com/company/senior-management-team/) - [Values](https://www.theamegroup.com/company/values/) - [Partners](https://www.theamegroup.com/company/partners/) - [Blog](https://www.theamegroup.com/blog/) #### Services - [Managed Security Services](https://www.theamegroup.com/managed-security/) - [Managed IT Services](https://www.theamegroup.com/managed-services/) - [Cloud Services](https://www.theamegroup.com/cloud-services/) - [ERP Services](https://www.theamegroup.com/erp-services/) - [Software Development Services](https://www.theamegroup.com/software-development/) - [Private Cloud Hosting](https://www.theamegroup.com/private-cloud-hosting/) ### Subscribe to Monthly Technology and Security Newsletter [Follow us on Facebook](https://www.facebook.com/theamegroup) [Follow us on LinkedIn](https://www.linkedin.com/company/107749) [Follow us on Facebook](https://www.instagram.com/yourtechnologysuccesspartner/) [Follow us on Facebook](https://www.youtube.com/theamegroup)