Question

John has had a message pop-up on his computer asking him to pay $800 to have his files

decrypted. He has looked at his file store, and his filenames have been changed. State two
ways this could have happened.
​

Answer 1

1. Downloaded any file that could have the ransomware.
2. Intentionally install the ransomware itself.
3. He might be connected to a public Wi-Fi

Answer 2

• Installed a program containing ransomware/malware. (Do not accept downloaded without inferring it was installed)

• Opened an email attachment containing malware.

• Opened a file containing a malicious macro.

• Left his computer unsecure allowing someone else to install malware on it. (Should include an example, e.g. not logging off)