--- title: Everything you need to know about Ransomware Attacks description: Ransomware attacks have recently made the headlines with WannaCry but, do you really know how they work? Here are the 4 steps of a Ransomware Attack. image: https://blog.pradeo.com/hubfs/4-phases-ransomware-attack2.jpg --- [![pradeo\_logo\_color](https://blog.pradeo.com/hs-fs/hubfs/pradeo_logo_color.png?width=220&height=33&name=pradeo_logo_color.png "pradeo_logo_color")](https://pradeo.com) - Solutions - [Mobile Threat Defense](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Secure Private Store](https://pradeo.com/en/solutions/mobile-device-security/secure-private-store/) - [Mobile Application Compliance Audit](https://pradeo.com/en/solutions/mobile-application-security/application-compliance-audit/) - [Runtime Application Self Protection](https://pradeo.com/en/solutions/mobile-application-security/rasp/) - [Shielding](https://pradeo.com/en/solutions/mobile-application-security/application-shielding/) - [Application Security Testing](https://pradeo.com/en/solutions/mobile-application-security/application-security-testing/) - Use cases - [Cybersecurity in MDM/ UEM](https://pradeo.com/en/use-cases/cybersecurity-in-mdm-uem/) - [Securing mobile devices](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Securing Mobile Applications](https://pradeo.com/en/solutions/mobile-application-security/application-security-testing/) - [Malware / leakware protection](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Phishing protection](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) - [Ensuring compliance for applications](https://pradeo.com/en/compliance/) - [Ensuring compliance for mobile fleet](https://pradeo.com/en/compliance/) - [Securing BYOD](https://pradeo.com/en/solutions/mobile-device-security/secure-private-store/) - [Become partner](https://pradeo.com/become-partner/) - Resources - [Solution briefs](https://pradeo.com/en/resources/?solution-briefs) - [Customer Cases](https://pradeo.com/en/resources/?customer-cases) - [Integration briefs](https://pradeo.com/en/resources/?integration-briefs) - [White Papers](https://pradeo.com/en/resources/?white-papers) - [Analyst reports & guides](https://pradeo.com/en/resources/?analyst-reports-guides) - [On demand webcast](https://pradeo.com/en/resources/?webcasts-on-demand) - [About us](https://pradeo.com/en/about/) - [Blog](https://blog.pradeo.com/) - [Contact](https://pradeo.com/contact/) - en - [**FR**](https://blog.pradeo.com/fr) - [**DE**](https://blog.pradeo.com/de) ### Topics - Select a Topic ### Stay up to date SUBSCRIBE TO OUR BLOG ### Stay up to date [Mobile Security](https://blog.pradeo.com/topic/mobile-security) # Everything you need to know about Ransomware Attacks ![Picture of Roxane Suau](https://blog.pradeo.com/hubfs/roxane-suau.jpg) By [Roxane Suau](https://blog.pradeo.com/author/roxane-suau) on June, 7 2017 [mailto:?subject=Take%20a%20look%20at%20this%20article](mailto:?subject=Take%20a%20look%20at%20this%20article) ![](https://blog.pradeo.com/hubfs/4-phases-ransomware-attack2.jpg)   **Ransomware attacks have recently made the headlines with WannaCry but, do you really know how they work? Here are the 4 steps of a Ransomware Attack.**   ## **1. INFECTION** A Ransomware can attack computers, smartphones or tablets using different formats such as **phishing emails, adwares or malicious applications**. Once hosted, the malicious ransomware file can be triggered either remotely by the hacker, at a specific day and time or when the user performs a specific action. ## **2. BACKUP SPOLIATION** Once activated, the Ransomware may **locate and remove the backup files** to make any restoration impossible. ## **3.** **DEVICE BLOCKING** Depending on the category, a Ransomware can **encrypt files, display a threatening message (overlay) or even modify the device unlocking password**. In any case, the user cannot use his device.  ## **4. NOTIFICATION** The user is being informed that **his files are being held up and is asked to pay a ransom**. Usually, victims are given a few days to pay, after which the amount increases until **files are eventually deleted when the timeout has been reached.**   ---   Learn how to prevent, detect and neutralize a Ransomware Attack with our solutions: - [Mobile Threat Defense](https://www.pradeo.com/en-US/mobile-threat-protection) - [App Security Testing](https://www.pradeo.com/en-US/apps-security-testing) - [In-App Protection](https://www.pradeo.com/en-US/in-app-protection) ###### About The Author [More from this author](https://blog.pradeo.com/author/roxane-suau) ![](https://blog.pradeo.com/hs-fs/hubfs/roxane-suau.jpg?height=100&name=roxane-suau.jpg) ###### Roxane Suau #### Recommended articles [![Smartphones: massive data leaks… that are perfectly legal](https://blog.pradeo.com/hubfs/Template%20article%20(14)-1.png)](https://blog.pradeo.com/smartphones-massive-data-leaks-that-are-perfectly-legal) ###### [Smartphones: massive data leaks… that are perfectly legal](https://blog.pradeo.com/smartphones-massive-data-leaks-that-are-perfectly-legal) \- December 18, 2025 [![Mobile threats: what the new ANSSI report reveals](https://blog.pradeo.com/hubfs/Template%20article%20(11)-1.png)](https://blog.pradeo.com/mobile-threats-what-the-new-anssi-report-reveals) ###### [Mobile threats: what the new ANSSI report reveals](https://blog.pradeo.com/mobile-threats-what-the-new-anssi-report-reveals) \- December 4, 2025 [![Techstep chooses Pradeo to provide next-level Mobile Threat Defense to its users](https://blog.pradeo.com/hubfs/Template%20article%20(13).png)](https://blog.pradeo.com/techstep-chooses-pradeo-to-provide-next-level-mobile-threat-defense-to-its-users) ###### [Techstep chooses Pradeo to provide next-level Mobile Threat Defense to its users](https://blog.pradeo.com/techstep-chooses-pradeo-to-provide-next-level-mobile-threat-defense-to-its-users) \- November 20, 2025 ### Popular articles ### Stay up to date ### Recent articles ### Articles récents [Fence integrates Pradeo's technology to secure its clients' mobile fleets](https://blog.pradeo.com/fence-integrates-pradeos-technology-to-secure-its-clients-mobile-fleets-1) \- 7 June, 2017 [RedHook: the banking trojan that grants itself system-level access on Android](https://blog.pradeo.com/redhook-the-banking-trojan-that-grants-itself-system-level-access-on-android) \- 7 June, 2017 [What Google's latest report reveals about mobile threats](https://blog.pradeo.com/what-googles-latest-report-reveals-about-mobile-threats) \- 7 June, 2017 [Android: The 4th zero-day vulnerability patched in six months](https://blog.pradeo.com/android-the-4th-zero-day-vulnerability-patched-in-six-months-1) \- 7 June, 2017 [Vibe Coding: when AI-generated code multiplies vulnerabilities](https://blog.pradeo.com/vibe-coding-when-ai-generated-code-multiplies-vulnerabilities) \- 7 June, 2017 ### Topics - [Mobile Security (56)](https://blog.pradeo.com/topic/mobile-security) - [Mobile Application Security (46)](https://blog.pradeo.com/topic/mobile-application-security) - [Expertise (31)](https://blog.pradeo.com/topic/expertise) - [Security Alert (30)](https://blog.pradeo.com/topic/security-alert) - [Cybersecurity (29)](https://blog.pradeo.com/topic/cybersecurity) - [News (28)](https://blog.pradeo.com/topic/news) - [Partners (25)](https://blog.pradeo.com/topic/partners) - [Corporate (12)](https://blog.pradeo.com/topic/corporate) - [Events (4)](https://blog.pradeo.com/topic/events) - [Actualité (2)](https://blog.pradeo.com/topic/actualité) - [predictions (2)](https://blog.pradeo.com/topic/predictions) - [cyberattack (1)](https://blog.pradeo.com/topic/cyberattack) see all [![New Call-to-action](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/2378615/ad3111b0-9454-41ff-91f4-9eee95b1f08f.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/2378615/ad3111b0-9454-41ff-91f4-9eee95b1f08f) ### Get in touch with mobile security experts [Contact us](https://www.pradeo.com/en-US/contact-us) [![](https://blog.pradeo.com/hs-fs/hubfs/pradeo_logo_white_square.png?width=90&height=74&name=pradeo_logo_white_square.png)](https://pradeo.com) European leader in mobile security, Pradeo protects business mobile devices and applications. [Read More](https://www.pradeo.com/en-US/) - [Resources](https://www.pradeo.com/en-US/pradeo-ressources#white_papers) - [UEM security](https://www.pradeo.com/en-US/uem-mdm-security) - [Use cases](https://www.pradeo.com/en-US/pradeo-ressources#use-case) - [Data protection](https://www.pradeo.com/en-US/mobile-data-privacy-regulation) - [Contact us](https://www.pradeo.com/en-US/contact-us) - [Mobile Threat Defense](https://www.pradeo.com/en-US/mobile-threat-defense) - [Mobile Application Security Testing](https://www.pradeo.com/en-US/application-security-testing) - [In-App Protection](https://www.pradeo.com/en-US/in-app-protection) - [Secure Private Store](https://www.pradeo.com/en-US/private-app-store) - [Mobile Threat Intelligence](https://www.pradeo.com/en-US/mobile-threat-intelligence#perso-threat-intelligence) ![email.svg](https://cdn2.hubspot.net/hubfs/3067823/awwal/email.svg "email.svg") [contact@pradeo.com](mailto:contact@pradeo.com) Copyright @ 2022. All Right Reserved. - - - ```json { "@context" : "http://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Roxane Suau" }, "dateModified" : "January 27, 2021, 1:31:00 PM", "datePublished" : "2017-06-07 11:14:48", "description" : "Ransomware attacks have recently made the headlines with WannaCry but, do you really know how they work? Here are the 4 steps of a Ransomware Attack.", "headline" : "Everything you need to know about Ransomware Attacks", "image" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/2378615/4-phases-ransomware-attack2.jpg" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://2378615.fs1.hubspotusercontent-eu1.net/hubfs/2378615/Logo%20Pradeo%20D%C3%A9grad%C3%A9%20Long%20Couleurs.svg" }, "name" : "Pradeo" } } ```