In a ransomware attack, the attacker typically:

1. Ransomware is a cyber crime in which the attacker first gains access to the computer. 2. The attacker then blocks the user from accessing their own data, usually by encrypting it. 3. Payment is demanded in exchange for restoring access. 4. The attacker may also threaten to publish sensitive personal information unless a ransom is paid. 5. It commonly arrives through unsafe downloads, spam attachments or malicious advertisements. _Source: NCERT Informatics Practices Class 12, Ch 6 'Societal Impacts', S6.6.3 Ransomware_