Ransomware typically enters through downloads, like email attachments or counterfeit software. Once executed, it encrypts your files, locks them with a unique extension, and restricts access.