Ransomware primarily functions as what?

Study for the Certified Bank Secrecy Act Professional Test. Use flashcards and multiple-choice questions with hints and explanations. Get exam ready!

Ransomware is malware designed to block access to data by encrypting it, then demanding payment to provide the decryption key. The attacker’s primary goal is extortion—don’tation of money in exchange for restoring access. Infections usually occur through phishing or malicious downloads, after which files across the system are encrypted, leaving victims with a ransom note outlining payment terms (often in cryptocurrency). Some variants also threaten to dump stolen data, but the essential behavior is still encryption plus a ransom demand to regain access. The other descriptions refer to defensive tools or unrelated activities, not the malware’s intent. To defend against this, focus on strong backups (preferably offline and isolated), patching, least-privilege access, endpoint protection, and user education to prevent initial infection.