Reply to post: Re: Is it per workstation

UK hospital meltdown after ransomware worm uses NSA vuln to raid IT

patrickstar

Re: Is it per workstation

Typically what ransomware does is add an extension to the file (like ".encrypted"), and then has a whitelist of extensions to actually encrypt.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon