Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account


What is Ransomware?

Ransomware has quickly become the most profitable type of malware ever seen. Hackers encrypt the files in your computer and ask for a fee — or ransom — in exchange for the encryption keys. See how a ransomware attack unfolds.

Are you ready?

Are you ready?

Could your organization avoid a ransomware attack? To protect yourself against ransomware and other threats, you need more than just security solutions. You need strong processes, such as data backup, regular patching and network segmentation. This checklist will help you identify the next steps to build a robust defense.

Adversaries exploit your vulnerabilities


Malicious ads that automatically download malware or redirect users to exploit kits while they visit infected websites.

Exploit kits

Software kits that identify vulnerabilities so that they can upload and run malicious code, such as ransomware.

Email exploit

Links or attachments in phishing or spam emails infected with ransomware.

Poor network security

Ransomware can target entire networks to maximize the impact and profitability of an attack.

Everything you need to know

Learn more about how ransomware gets in and how to protect your company.

Register now and download the Ransomware: Everything You Need to Know whitepaper!


The threat landscape

The Cisco 2017 Annual Cybersecurity Report analyses evolving threats such as ransomware and many others. It offers cybersecurity trends and in-depth insights into how businesses can protect themselves.

Get report

Cisco Ransomware Defense

There are multiple ways for ransomware to get in. To reduce the risk of infections, organisations need a layered defense. Our ransomware defense solution protects you from the DNS layer to email to the endpoint and it's backed by industry-leading Talos threat research.

First line of defense

Cisco Next-Generation Firewall blocks suspicious connections, while Cisco Advanced Malware Protection (AMP) contains and remediates malware. Cisco Email Security blocks phishing and other email threats used to deliver ransomware payloads.

Block bad websites

Cisco Umbrella blocks requests to access suspicious domains to stop users from visiting websites contaminated with malvertising and other threats.

Retrospective security

Sometimes malware disguises its malicious behaviour to pass initial inspection. AMP for Endpoints blocks the file when it shows its true nature.

Stop encryption

Cisco Umbrella blocks the downloaded ransomware file from requesting access to Encryption Key Infrastructure

Learn more about how our layered defense against ransomware can help protect your organisation.

Free trial of Cisco Umbrella

Discover how you can stop threats on their tracks, before your users can even connect to malicious websites.

Available in English only