Political Awareness

Note: Political Awareness’s published communication is never authorized by any candidate or their committees.

What Is Ransomware?

Ransomware is a type of malicious software (malware) that locks or encrypts your files so you can’t access them. Criminals then demand money (a ransom) to unlock your data. If you don’t pay, they may threaten to delete your files or leak them online.

What Is Ransomware-as-a-Service (RaaS)?

Imagine being able to rent a hacker toolkit — that’s what Ransomware-as-a-Service (RaaS) is.

It’s a business model used by cybercriminals. Even people who don’t know how to code can use RaaS platforms (found on the dark web) to launch ransomware attacks. They simply pay a fee or give a portion of the ransom payment to the developers who built the tools.

Real-Life Case: Qilin Targets Hospitals (2025)

In early 2025, a group called Qilin ran a RaaS operation that targeted hospitals in the United States.

• Several hospitals had to cancel surgeries and reroute emergency patients.
• Qilin demanded $5 million in Bitcoin from one hospital.
• Shockingly, the attack was carried out by a teenager who downloaded the tools and followed basic instructions online.

This incident showed how anyone, even those with no hacking background, could now carry out high-impact cyberattacks.

Why Should I Care?

You might think: “Why would hackers target me?”

But with RaaS, everyone is a potential target: individuals, schools, small businesses, local governments, and hospitals.

Ransomware can:

• Lock your personal files, photos, and documents
• Steal your identity
• Disrupt your workplace
• Expose sensitive or private information
• Demand large sums of money

How to Protect Yourself and Your Workplace

Here are simple, effective steps anyone can follow:

1. Think Before You Click

Don’t open links or download attachments from suspicious emails. One wrong click can infect your device.

2. Back Up Your Data

Save copies of your files on secure cloud services or external drives. If you’re attacked, you won’t lose everything.

3. Use Strong, Unique Passwords

Don’t reuse the same password across multiple accounts. Use passphrases or a password manager to keep things secure.

4. Keep Software Updated

Updates often include security patches. Don’t ignore them; they fix holes that hackers can exploit.

5. Learn the Warning Signs

If your screen suddenly locks and demands payment, you may be under attack. Disconnect from the internet and contact a professional right away.

What Can Organizations Do?

• Educate Employees: Most ransomware attacks begin with someone clicking a malicious link. Training can prevent this.
• Use Security Tools: Antivirus programs, firewalls, and email filters can help catch threats early.
• Restrict Data Access: Only allow people to access the data necessary for their role.
• Have a Response Plan: Know what steps to take before, during, and after an attack.

Key Terms Glossary

• Ransomware – Malware that locks your files and demands money to unlock them.
• RaaS (Ransomware-as-a-Service) – A criminal business model where hackers sell or lease ransomware tools.
• Dark Web – A hidden part of the internet where illegal activities often take place.
• Encryption – A process that locks digital information so it can’t be accessed without a special code or key.

Final Thoughts

Ransomware isn’t just a problem for large tech companies — it’s something that can affect anyone. With Ransomware-as-a-Service, even people with no technical skills can cause major damage.

The good news, you can take simple steps to protect yourself. Cybersecurity is everyone’s responsibility, and even small habits can make a big difference.