Ransomware Basics

What is crypto ransomware?

Crypto ransomware encrypts a victim’s files so they cannot be opened, then demands payment for the decryption key. It is the most common and damaging form of ransomware, because the data remains present but unusable.

Detecting it reliably requires looking inside files for evidence of encryption, which is what Elastio’s deep file inspection does — even against intermittent encryption that evades entropy-based tools.

Last updated

Prove your recovery

See the evidence behind the decision.

Pursuit investigates compromise and guides response. Hunt provides evidence to assess recovery candidates.