Security Awareness Briefing  //  Eriu Technology  //  Defensive Use Only

HELD TO
RANSOM

Your files, locked. Your backup, untested.

How ransomware takes a business hostage — and why the backup you've never restored is just a prayer.

01 / What it is

Ransomware is malicious software that encrypts your files and demands payment for the key. Modern crews go further: they steal a copy first, then threaten to publish it — so paying doesn't even guarantee silence.

02 / How it works
1
It gets in — a phished click, a weak remote login, an unpatched hole.
2
It spreads quietly, often reaching the backups first.
3
It encrypts everything it can touch and leaves a ransom note.
4
They demand payment — and increasingly, threaten to leak your data too.

→ Days of downtime, data you may never get back, and a bill either way. Recovery lives or dies on your backups.

How it gets in

The front doors are boringly consistent:

PhishingA click that drops the first foothold.
Exposed remote accessRDP or VPN with a weak password.
Unpatched softwareA known hole left open.
A supplierCompromised through a trusted tool.
!
A backup you haven't restored isn't a backupKeep backups offline or immutable so ransomware can't reach them — and actually test a restore, regularly. The time to find out your backup is broken is a quiet Tuesday, not the morning everything's encrypted.
03 / Why it's dangerous
  • It targets your backups first, because that's your way out.
  • Paying isn't a fix. Keys fail, and your data may already be copied.
  • Downtime is the real cost — days or weeks of a business not running.
  • Double extortion means even good backups don't stop the leak threat.
04 / How you stop it
  • Keep offline or immutable backups ransomware can't reach.
  • Test restores regularly — a backup is only real once it's come back.
  • Patch fast and close exposed remote access behind MFA.
  • Segment the network so one infected machine can't take the lot.
  • Have a written plan for who does what on day one.
Files locked · Backup untested
An Eriu Technology security briefing  ·  Awareness & defence only