Skip to main content    

An official website of the United States government

Here’s how you know

**Official websites use .gov**              A **.gov** website belongs to an official government organization in the United States.            

**Secure .gov websites use HTTPS**              A **lock** (  LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.            

https://www.nist.gov/itl/smallbusinesscyber/guidance-topic/ransomware

            -  Topics  -  All Topics 
-  Advanced communications 
-  Artificial intelligence 
-  Bioscience 
-  Buildings and construction 
-  Chemistry 
-  Climate 
-  Cybersecurity 
-  Electronics 
-  Energy 
-  Environment 
-  Fire 
-  Forensic science 
-  Health 
-  Information technology 
-  Infrastructure 
-  Manufacturing 
-  Materials 
-  Mathematics and statistics 
-  Metrology 
-  Nanotechnology 
-  Neutron research 
-  Performance excellence 
-  Physics 
-  Public safety 
-  Resilience 
-  Standards 
-  Transportation 
 
            -  Publications 
            -  Labs & Major Programs  -  Laboratories    -  Communications Technology Laboratory 
  -  Engineering Laboratory 
  -  Information Technology Laboratory 
  -  Material Measurement Laboratory 
  -  Physical Measurement Laboratory 
-  User Facilities    -  NIST Center for Neutron Research 
  -  CNST NanoFab 
-  Research Test Beds 
-  Research Projects 
-  Tools & Instruments 
-  Major Programs    -  Baldrige Performance Excellence Program 
  -  CHIPS for America Initiative 
  -  Manufacturing Extension Partnership (MEP) 
  -  Office of Advanced Manufacturing 
  -  Special Programs Office 
  -  Technology Partnerships Office 
 
            -  Services & Resources  -  Standards and Measurements    -  Calibration Services 
  -  Laboratory Accreditation (NVLAP) 
  -  Quality System 
  -  Standard Reference Materials (SRMs) 
  -  Standards.gov 
  -  Time Services 
  -  Office of Weights and Measures 
-  Software 
-  Data    -  Chemistry WebBook 
  -  National Vulnerability Database 
  -  Physical Reference Data 
  -  Standard Reference Data (SRD) 
-  Storefront 
-  License & Patents 
-  Computer Security Resource Center (CSRC) 
-  NIST Research Library 
 
            -  News & Events  -  News 
-  Events 
-  Blogs 
-  Feature Stories 
-  Awards 
-  Video Gallery 
-  Image Gallery 
-  Media Contacts 
 
            -  About NIST  -  About Us    -  Leadership 
  -  Organization Structure 
  -  Budget & Planning 
-  Contact Us 
-  Visit 
-  Careers    -  Student programs 
-  Work with NIST 
-  History    -  NIST Digital Archives 
  -  NIST Museum 
  -  NIST and the Nobel 
-  Educational Resources 
 

Information Technology Laboratory

## Small Business Cybersecurity Corner

-  Cybersecurity Basics 
-  NIST Cybersecurity Framework 
-  Events 
-  Guidance by Sector  Expand or Collapse    -  Health Sector 
  -  Manufacturing Sector 
-  Guidance by Topic  Expand or Collapse    -  All Purpose Guides 
  -  Choosing a Vendor/Service Provider 
  -  Cloud Security 
  -  Cyber Insurance 
  -  Cybersecurity Risks 
  -  Government Contractor Requirements 
  -  Developing Secure Products 
  -  Employee Awareness 
  -  Multi-Factor Authentication 
  -  Phishing 
  -  Privacy 
  -  Protecting Against Scams 
  -  Ransomware 
  -  Responding to a Cyber Incident 
  -  Securing Data & Devices 
  -  Securing Network Connections 
  -  Telework 
-  Training  Expand or Collapse    -  Glossary 
-  Videos 
-  Get Engaged  Expand or Collapse    -  About 
-  Cybersecurity @ NIST 

## Connect with us

Twitter

# Ransomware

## Share

Facebook

Linkedin

Twitter

Email

**You can download a pdf version of this page here.**

What could be more terrifying to you, a small business owner, than to discover you are locked out of your own computers because you’ve been hit with ransomware.

**What is “ransomware”?**

Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access.

Here’s an example of how a ransomware attack can occur:
                      - A user is tricked into clicking on a malicious link that downloads a file from an external website.
                      - The user executes the file, not knowing that the file is ransomware.
                      - The ransomware takes advantage of vulnerabilities in the user’s computer and other computers to propagate throughout the organization.
                      - The ransomware simultaneously encrypts files on all the computers, then displays messages on their screens demanding payment in exchange for decrypting the files.

https://www.nist.gov/itl/smallbusinesscyber
https://csrc.nist.gov/projects/ransomware-protection-and-response

Ransomware disrupts or halts an organization’s operations and poses a dilemma for management: does the organization pay the ransom and hope that the attackers keep their word about restoring access, or does the organization not pay the ransom and restore operations themselves?

Fortunately, organizations can take steps to prepare for ransomware attacks. This includes protecting data and devices from ransomware and being ready to respond to any ransomware attacks that succeed. 

Don’t assume your business is too small to get hit. The nature of ransomware is that the cybercriminals work to ensure their malware spreads as widely as possible, infecting the computers of individuals and businesses of all sizes.

Common ways ransomware can hit you:
                  - Email – phishing emails can trick you into clicking on an attachment (“Urgent Invoice”) that allows the malicious software program to take over your computer. 
                  - Malware – if your network or software is vulnerable , a cybercriminal can sneak in and plant malicious code. It might sit unnoticed for a period of time, allowing the bad guys time to access files and steal data, then finishing up with unleashing ransomware so you can’t see the damage.

Ransomware is a common threat against any business, large or small. It can put a company out of business or disrupt operations for a long period of time. Paying the ransom can be very expensive and there’s no guarantee that data will ever be recovered. If customer data is stolen, it may trigger state data breach notification laws.

Here are additional resources from NIST and partner federal agencies to help you protect against and respond to ransomware attacks :
                      - NIST                          - Tips and Tactics: Preparing Your Organization for Ransomware Attacks
                        - NIST Cybersecurity Framework Quick Start Guide
                        - Getting Started with Cybersecurity Risk Management: Ransomware Quick Start Guide
                        - NISTIR 8374: "Ransomware Risk Management: A Cybersecurity Framework Profile"
                        - Protecting Your Data From Ransomware and Other Data Loss Events
                      - CISA (Cybersecurity and Infrastructure Security Agency)                          - Stop Ransomware website
                        - Ransomware Executive One-Pager
                      - Cyber Readiness Institute	                         - Ransomware Playbook
                      - FBI                          - Ransomware Fact Sheet
                        - https://www.fbi.gov/scams-and-safety/common-scams-and-crimes/ransomware
                      - FTC                          - Ransomware Guide
                      - HHS	                         - “Prepare, React, and Recover From Ransomware"

### HEADQUARTERS

301-975-2000

Webmaster | Contact Us | Our Other Offices

TwitterFacebookLinkedInInstagramYouTubeGiphyRSS FeedMailing List

Feedback

            -  Site Privacy 
            -  Accessibility 
            -  Privacy Program 
            -  Copyrights 
            -  Vulnerability Disclosure 
            -  No Fear Act Policy 
            -  FOIA 
            -  Environmental Policy 
            -  Scientific Integrity 
            -  Information Quality Standards 
            -  Commerce.gov 
            -  Science.gov 
            -  USA.gov 
            -  Vote.gov