[Cyber Security Terms](/glossary) Ransomware [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) [Cyber Security Terms](/glossary) # Ransomware ##### [Edward Kost](/team/edward-kost) updated Nov 01, 2021 ###### Contents ## What is Ransomware? Ransomware is a type of malware that encrypts computer systems to block user access until a set ransom is paid. Ransoms is usually only payable in bitcoin to make it difficult for law enforcement to track down the criminal recipients. To assist in its rapid proliferation, ransom operations have adopted a Ransomware-as-a-Service (RaaS) business model - which is a variation of the innocuous Software-as-a-Service  (SaaS) Model. The RaaS model allows anyone to sign up as a ransomware affiliate to earn a percentage of each ransom payment. The success of this financial model has caused a dramatic increase in ransomware attacks, making ransomware the current biggest cyber threat to businesses globally. ## Key takeaways * The average ransom payment increased by 33% between 2019 and 2020. * You don't need to be an expert hacker to sign up as a ransomware affiliate. * Phishing attacks are the most common attack vectors for ransomware injections. * * ###### Reviewed by No items found. ###### Author ##### [Edward Kost](/team/edward-kost) ###### Reviewed by ##### [Kaushik Sen](/team/kaushik-sen) ###### Join 27,000+ cybersecurity newsletter subscribers ## Read more about Ransomware Learn more about Ransomware and the latest issues in cybersecurity. [UpGuard](/blog/double-extortion-ransomware) [What is Double Extortion Ransomware? And How to Avoid It](/blog/double-extortion-ransomware) #### [What is Double Extortion Ransomware? And How to Avoid It](/blog/double-extortion-ransomware) A double extortion ransomware attack occurs when attackers threaten to further expose compromised data. Learn how to prevent these attacks. [](/team/axel-sukianto) [Axel Sukianto](#) November 13, 2025 [UpGuard](/blog/can-macs-get-ransomware) [Yes, Macs Can Get Infected with Ransomware (But It's Avoidable)](/blog/can-macs-get-ransomware) #### [Yes, Macs Can Get Infected with Ransomware (But It's Avoidable)](/blog/can-macs-get-ransomware) Learn how ransomware affects Macs and other Apple devices, and how you can stay protected. [](/team/catherine-chipeta) [Catherine Chipeta](#) November 13, 2025 [UpGuard](/blog/how-to-decrypt-ransomware) [How to Decrypt Ransomware (with 100% Free Tools)](/blog/how-to-decrypt-ransomware) #### [How to Decrypt Ransomware (with 100% Free Tools)](/blog/how-to-decrypt-ransomware) Learn how to decrypt ransomware with our list of free decryption tools + prevention strategies to avoid future attacks. [](/team/catherine-chipeta) [Catherine Chipeta](#) December 1, 2025 [UpGuard](/blog/how-do-you-get-infected-by-ransomware) [How Do You Get Infected by Ransomware?](/blog/how-do-you-get-infected-by-ransomware) #### [How Do You Get Infected by Ransomware?](/blog/how-do-you-get-infected-by-ransomware) Learn how you can get infected by ransomware and how to prevent it. [](/team/kyle-chin) [Kyle Chin](#) December 1, 2025 [UpGuard](/blog/best-practices-to-prevent-ransomware-attacks) [How to Prevent Ransomware Attacks: Top 10 Best Practices](/blog/best-practices-to-prevent-ransomware-attacks) #### [How to Prevent Ransomware Attacks: Top 10 Best Practices](/blog/best-practices-to-prevent-ransomware-attacks) Learn the best practices for preventing and recovering from ransomware attacks. [](/team/kyle-chin) [Kyle Chin](#) June 30, 2025 [UpGuard](/blog/explanation-of-australias-ransomware-action-plan) [A Clear Explanation of Australia’s Ransomware Action Plan](/blog/explanation-of-australias-ransomware-action-plan) #### [A Clear Explanation of Australia’s Ransomware Action Plan](/blog/explanation-of-australias-ransomware-action-plan) A clear explanation of Australia's Ransomware Action Plan, its impact on Australian businesses, and how to comply with its initiatives. [](/team/edward-kost) [Edward Kost](#) June 25, 2025 [View all blog posts](/blog) ## See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Contact sales](/demo) [Free demo](/demo) ## More from our blog Learn more about the latest issues in cybersecurity. [UpGuard](/blog/find-out-if-youre-exposed-on-the-dark-web) [Find Out if You're Exposed on the Dark Web](/blog/find-out-if-youre-exposed-on-the-dark-web) #### [Find Out if You're Exposed on the Dark Web](/blog/find-out-if-youre-exposed-on-the-dark-web) Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure. [](/team/lance-turner) [Lance Turner](#) October 14, 2026 [UpGuard](/blog/upguard-named-leader-in-idc-marketscape) [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) #### [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [](/team/cassy-van-eeden) [Cassy van Eeden](#) October 18, 2026 [UpGuard](/blog/your-first-dark-web-scan-report-explained) [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) #### [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) You scanned your domain. What do the results mean? [](/team/lance-turner) [Lance Turner](#) October 11, 2026 [UpGuard](/blog/ai-evidence-analysis-tools-for-tprm) [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) #### [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four. [](/team/cassy-van-eeden) [Cassy van Eeden](#) September 29, 2026 [UpGuard](/blog/cybersecurity-horror-stories-2026) [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026) #### [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026) A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news. [](/team/revashni-moodley) [Revashni Moodley](#) October 14, 2026 [UpGuard](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) [Good Security Rating? Your Dark Web Exposure Says Otherwise](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) #### [Good Security Rating? Your Dark Web Exposure Says Otherwise](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) Scan your domain to see just how exposed you are on the Dark Web. [](/team/lance-turner) [Lance Turner](#) October 11, 2026 [View all blog posts](/blog) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)