Privacy Ninja



        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

5 Types of Ransomware, Distinguished

5 Types of Ransomware, Distinguished

Knowing the distinction between the types of ransomware can help you take the more appropriate action
Knowing the distinction between the types of ransomware can help you take the more appropriate action

Knowing the enemy is winning half the battle. In the digital era where almost everyone exchanges information online, a compromised cybersecurity can be a huge threat. Cybercriminals are getting more and more creative in making sophisticated malwares. Disguised as a legitimate file, software, or program, malwares are now easier to come upon yet harder to get rid off. In this article, we will take a look the 5 types of ransomware you should watch out for, (and how to distinguish one from another) so you can take the more appropriate action.

What is ransomware?

Ransomware is a variation of malware (malicious software) that encrypts files and documents. It can infect a single unit of computer or even an entire network- including servers of a company. From the word itself, the perpetrator demands a ransom from the victim in exchange for a “decryption key” to regain access.

From records,  attack vectors frequently used by cybercriminals include the Remote Desktop Protocol, phishing emails, and software vulnerabilities. As such, there can be several permutations of a ransomware depending on the proficiency of creator, the vector, and the target host. Below are the top five most common types of ransomware:

Don’t Be Baited! 5 Signs of Phishing in Email

1. Crypto ransomware or encryptors 

This variant encrypts your important data, such as documents, photos, and videos, without necessarily interfering with your computer’s basic functions. This creates a more hostile atmosphere as the user can see his important files, but cannot gain access to them.

Crypto ransomware often comes with a countdown timer window that basically tells you, “pay before the deadline, otherwise lose your files”.  Historically, it is quite impossible to decrypt a crypto ransomware-infected device and files without paying the ransom. However you might stand a greater chance if you collaborate with a cybersecurity expert.

Also Read: When to Appoint a Data Protection Officer

2. Lockers

Contrary to crypto ransomware, a locker would block your computer’s basic functions; such as denying you access to your desktop while partially disabling your mouse and/or keyboard. This type of ransomware do not encrypt your important files.

You are only allowed to interact with the ransom window wherein you are expected to make the payment. If you are collaborating with a top cybersecurity expert, you may even be able to regain access without paying ransom. To reiterate, locker malwares do not target critical files as its general aim is just to lock you out; therefore, it poses a lesser threat than crypto lockers. Nevertheless, it can still be a big problem when dealt with poorly.

Remain composed and consult with your IT Department, Data Protection Officer (DPO), or outsourced cybersecurity professionals.
Remain composed and consult with your IT Department, Data Protection Officer (DPO), or outsourced cybersecurity professionals.

3. Scareware

Among the other types of ransomware, this one is most commonly experienced by private users. It is a fake software that claims to have detected data breach or virus infiltration on your computer and directs you to pay a certain fee to resolve the problem. There are scareware strains that lock the computer while there are others which just floods the computer screen with pop-up alerts without harming internal files.

4. Doxware or Leakware

Especially notorious among corporations who use, collect, and disclose private data, a doxware will threaten to leak/distribute company information online should you fail to pay the ransom fee. Most private companies almost instantly resolves to pay to avoid the leakage of their confidential records.

Other doxware strains would claim to be law enforcement and will warn you that there had been illegal online activity detected in connection with your company; and you are thereby ordered to pay a fine to avoid heftier penalties or even jail time.

5. RaaS or Ransomware as a Service

RaaS refers to a subscription-based model that gives opportunity to affiliates to use a ready-made ransomware tool in perpetuating ransomware attacks. As such, a commission or “cut” from the loot is given to the anonymous host/affiliates.

Since it is based on SaaS solutions, RaaS users would not require skilled or experienced hackers to operate the ransomware tool. This can pose as serious threat in cybersecurity as RaaS ransomware becomes one of the most easiest ways to execute ransomware attacks.

The most important thing to note about ransomware is how it is extremely dependent on human interaction to trigger them. Thus, it is essential to ensure that your company is implementing cybersecurity protocol. This would greatly minimize your risk of falling victim to various types of ransomware.

However, if you still managed to get infected, the best strategy to avoid prompt payment of the ransom. Remain composed and consult with your IT Department, Data Protection Officer (DPO), or outsourced cybersecurity professionals.

Also Read: 4 Reasons to Outsource Penetration Testing Services

Ransomware will always catch you unaware, hiding behind legitimate updates, innocent-looking messages and the like. Be sure to remain vigilant and follow the defense components to help you keep your business safe against threat actors. 

Conducting regular penetration testing could also help ensure that threat actors are at bay as it searches for available vulnerabilities present in your system for you to acknowledge before bad actors can exploit them. 



Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection


We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.


Click one of our contacts below to chat on WhatsApp

× Chat with us