What is ransomware?

Ransomware is malicious software that makes data or systems inaccessible — usually by encrypting files — and demands payment in exchange for restoring access. Modern campaigns add a second layer of pressure by stealing data first and threatening to leak it, a tactic known as double extortion.

While much of the security industry focuses on stopping ransomware at the endpoint, the damage happens in the data. Elastio inspects inside your data and backups to detect that damage and to prove you can recover from a clean point, even when the attack bypasses perimeter and endpoint defenses.

Last updated May 27, 2026