Learning Objectives
- Differentiate viruses, worms, trojans, spyware and ransomware.
- Identify common infection pathways.
- Recognise warning signs of compromise.
- Apply defensive and recovery fundamentals.
Module 6
Malware and Ransomware
Recognise common malware behaviours and build practical defence, backup and recovery habits.
Why This Matters
Malware can cause data loss, downtime, fraud and privacy harm.
Preparation and backups are critical for reducing impact and restoring operations.
Plain-Language Explanation
Malware is malicious software delivered through unsafe downloads, compromised websites, malicious attachments, or vulnerable systems. Ransomware encrypts files and demands payment. Reliable backup strategy, patching, and least-privilege access are key defences. Payment does not guarantee recovery.
Defensive principle: isolate affected systems,
preserve evidence, and follow your incident process instead of
making rushed decisions.
Practical Examples
- User enables macros from an unexpected document and malware executes.
- Outdated software is exploited through a known vulnerability.
- Backups are connected online and also encrypted during ransomware spread.
Common Mistakes
- Relying on one defensive tool only.
- Not testing backup restoration procedures.
- Ignoring small performance anomalies and warning alerts.
Security Checklist
Module checklist progress0%
Short Knowledge Check
Question 1: Why are tested backups important for ransomware resilience?
Because untested backups may fail when urgently needed.
Question 2: Should infected devices stay connected to the network?
Usually no. Isolation can reduce spread, following internal response procedures.
Question 3: Is paying ransom a guaranteed fix?
No. Decryption or data return is not guaranteed.
Key Takeaways
- Prevention and preparedness reduce business and personal impact.
- Backup quality matters as much as backup frequency.
- A calm, structured response improves recovery outcomes.