Cybersecurity Cybercrime and Ransomware
Understand financially motivated threats without interacting with criminals.
How it works
Cybercrime can involve theft, extortion, fraud or disruption. Ransomware may encrypt files, steal data or threaten publication; a working backup addresses only part of that harm. Account takeover can also lead to fraudulent payment instructions without any malware. Consider the business process an attacker wants to misuse and the independent checks that would interrupt it.
Work through the example
This is a worked design or investigation exercise. Read the fixture, write your own decision, then compare it with the worked result. No live system, external account or attack is executed by this listing.
Example
Message: “Our bank details changed; pay the replacement invoice today.”
Check: call the supplier using an independently stored number
Control: a second approver verifies payment-detail changes
Record: retain the message and the verification outcome
Expected result
Payment details remain unchanged until independently verified.
The urgent message is evidence to inspect, not authority to act. A number inside the same email is not an independent verification channel. For ransomware planning, pair isolated, tested backups with access control and an incident process that also considers possible data theft.
Technical reference: NIST Cybersecurity Framework. Check the guidance for your actual platform and deployment.