What is ransomware? What to know after UMMC cyberattack - The Clarion-Ledger

NEWS What is ransomware? What to know after UMMC cyberattack Thao Nguyen, Marc Saltzman and staff reports Mississippi Clarion Ledger Feb. 23, 2026, 11:21 a.m. CT Ransomware was the largest threat to U.S. critical infrastructure in 2024, with complaints rising 9% from 2023, according to a report released by the FBI's Internet Crime Complaint Center (IC3). High-profile cyberattacks have prompted federal authorities to push for companies and organizations to beef up their security. University of Mississippi Medical Center clinics statewide remained closed Monday, Feb. 23, after a cyberattack on Thursday, Feb. 19, disrupted multiple systems. What is ransomware? Ransomware is an attack that locks your computer and demands a ransom to give back your data. Cybercriminals typically target businesses, governments and regular computer users in the hope they’ll pay to release files. For businesses, including health care facilities and universities, criminals typically extort $100,000 or more — or else the obtained files will be deleted, sold or published online to humiliate the organization. A user might sit down to use a computer and see an on-screen alert that the device is locked or that files have been “encrypted.” To obtain a decryption key, payment is demanded. The ransom is typically paid in difficult-to-trace cryptocurrency, such as Bitcoin. What to do after a cyberattack? According to cybersecurity experts, the rule of thumb is not to give in. “Even if you pay for a ‘decrypter,’ there’s no guarantee you’ll get your files back,” cautions Darren Shou, chief technology officer at NortonLifeLock, a leading cyber safety company. “In fact, paying encourages more criminal activity.” Shou said criminals hope for an “emotional response” that will quickly put your hand in your pocket. “It’s a scary moment when you realize someone put a lock on your stuff … you’ll often see text is in red, and maybe blinking — it’s scary.” If you’re attacked, experts suggest disconnecting the computer from the network, such as turning off Wi-Fi. On another device, do an online search to determine the kind of ransomware. Look for information on your hijacked computer screen, and perhaps take a photo as a backup. Sites such as No More Ransom may be able to help by matching your ransomware with a free tool to remove it. Though it may take some trial and error, there are some no-cost decrypters to use (from trusted sources) and run anti-malware software, too. Or you can bring a locked computer to a trusted technician to attempt to decrypt the files. Best Buy’s Geek Squad offers such a service. Shou advises getting as much information as possible. “Report the crime,” he says, “as it helps law enforcement and investigators try to find the perpetrators and prevent future attacks,” even if you already paid. There are cases of “double extortion,” in which the criminals exfiltrated data and kept a copy before the victim paid, then they attacked again by threatening to release private and potentially embarrassing emails, texts or images. Top cybercrimes reported by victims in 2024 The report found that the top three cybercrimes reported in 2024 were phishing/spoofing, extortion, and personal data breaches. The majority of complaints received by IC3 were from California, Texas and Florida. The report also highlighted rising trends in various types of scams, including: Call center scams: $1.9 billion in losses over 53,369 complaints Emergency scams: $2.7 million in losses over 357 complaints Toll scams: $129,624 in losses over 59,271 complaints Gold courier scams: $219 million in losses over 525 complaints Preventive tips Smart software and common sense can help minimize the odds of a ransomware attack. Install anti-malware cybersecurity software on all your devices. Delete suspicious emails and text messages purported to be from your bank, internet service provider (ISP), credit card company and so on. Clicking on a link may take you to a phony site asking for personal information. Phishing scams attempt to “lure” you to an authentic-looking site. Your bank or the IRS will never reach out to you via email and ask you to urgently confirm your personal or financial details. Never click on email attachments you didn't expect. Download apps (programs) only from trusted sources, such as the Microsoft Store (for Windows 10), the Mac App Store (for Mac users), App Store (iPhone, iPad) or Google Play for Android devices and Chromebooks. Keep apps and operating systems updated; where possible, set to auto-update, so you don’t have to remember to do it. Make sure the devices you have on your network, such as a wireless printer or router, are also updated with the latest software (“firmware”). Finally, regular backups are critical, whether it’s an offline solution (such as an inexpensive external hard drive, solid state drive or even a thumb drive) or an online cloud service (iCloud, Google Drive, Dropbox and so on) or both. Backups protect your files in the event of a ransomware attack (or other kinds of malware), as well as theft, fire or flood or a power surge that fries your hard drive. Featured Weekly Ad