Skip to content
Back to blog list
Fidye Yazılımı (Ransomware) Nedir? Nasıl Korunursun?
Computer Vision

What is Fidye Software (Ransomware)? How Do You Protect?

Automatically translated
Masqot Community
Masqot CommunityCreator
6 min read
Fidye software encrypts files and asks money. Species, WannaCry and NotePetya examples, protection steps and what to do first in the attack.

Fidye software (ransomware) is a malware that often wants to pay with cryptocurrency to encrypt or lock files on the computer or the network of the institution. The most effective protection is paid to regular and offline backup, updates loaded without delay, multi-factor authentication and suspicious emails. If you are attacked, separate the device from the network, pay the ransomware and report the event.

Last update: 23.10.2026

These attacks can target individual users, small businesses, large companies, hospitals and public institutions. Since 2019, many group files play data before encryption and threaten to publish if they are not paid (double blackmail). Some groups rent ransom software to others with subscription (Ransomware-as-a-Service). That’s why risk isn’t alone data loss, data leakage is also.

Fidye Software Types

Fidye software can be in different types:

  1. Locker Ransomware: It does not allow the user to do any transactions by locking the whole device. Usually the system remains locked until the ransom is paid.

  2. Crypto Ransomware: It prevents access by encrypting files on computer. You need a special key to open encrypted files.

  3. Tags: It is scared by showing false viruses or illegal content alert and wants money under the name “cleanness” or “ceza”. Most often files are really encrypted.

  4. Doxware (Leakware): Instead of encrypting files or blocking sensitive data together with encryption and threatens to publish if not paid.

  5. Mobile Ransomware: It makes encryption or locking process by targeting mobile devices.

Working Principle of Fidye Software

Fidye software usually follows these steps:

  1. Ways to Contain: Oltalama e-mails and attachments enter the system with fake software updates, unloaded security clears, remote desktop (RDP) connections to the internet and stolen passwords.

  2. Encryption: It prevents access by encrypting files or all system on computer.

  • Fidye Demand: Leaves a note on the screen; if it is not paid within a certain period, it tells that the switch will be deleted or published by stolen data.

  • Payment & Conclusion: In some cases the files can be opened when ransom is paid, but the attackers are not guaranteed to always be faithful to the word.

  • Important Fidye Software Attacks

    • WannaCry (2017): It started in 12.05.2017; more than 300.000 computers in about 150 countries. Microsoft was published in March 2017 (MS17-010) used a Windows deficit with EternalBlue tool. Harm forecasts vary from hundreds of millions of dollars to 4 billion dollars according to calculated drying.

    • Copyright © 2018. All Rights Reserved.: He aimed at Ukraine but also spread to global companies such as Maersk, Merck and FedEx TNT Express. Although Fidye note was actually an eraser (wiper) software that imposes data irreversibly; even those who pay could not recover their data. According to the US White House consultant, the total damage exceeds 10 billion dollars.

    • Ryuk (after 2018): Hospitals, school systems and public institutions have targeted large organizations. Often it was activated after being leaked into the network with pests such as TrickBot and Emotet, and it worked to disable weeks and hide backups.

    Ways to Protect from Fidye Software

    The basis of protection backup, update and identity security. Quickly check with the table below, then proceed to steps:

    Home

    Why work

    offline k

    Saldurganlar spares also target; the most reliable way of separate copy return from the network.

    Updates

    WannaCry spreads the patch from a Windows vulnerability that has been released two months ago.

    Multi-factor authentication (MFA)

    It makes it difficult to log in remotely with stolen password.

    Closed RDP

    Unnecessarily remote desktop is a frequent used entrance gate.

    Awareness

    Oltalama emails are still one of the most common ways of contamination.

    1. Implement a Strong Cyber Security Policy

    • Keep up-to-date Antivirus and firewall (firewall) software.

  • Avoid unsecured links and click on additional files.

  • Gives awareness on team and self cybersecurity.

  • 2. 2. Regular Backup

    • Apply the common 3-2-1 rule: at least 3 copies of the data, in 2 different environments, 1 one separate from the network and in another place.

    • Keep at least one backup offline; aggressive backups work to encryption. Reloading back from the backup regularly.

    3. How to Fix Updates

    • Update the operating system and all the software you use regularly; open the automatic update if possible.

    • Upload security patches, especially VPN and remote access tools without delay. Stop using the finished operating systems.

    4. Team and Self-existing

    • Be careful about suspicious emails, links, and file attachments; especially with suspicion of messages that rush.

    • Download software from unknown or unreliable sources.

    5. Improve Network Security

    • Use multi-factor authentication (MFA) on remote access and email; if not required, close RDP to the internet.

    • Use a security information and event management system that follows suspicious events in corporate networks.

    • Always monitor network traffic and detect unusual movements.

    What Should You Do If You Are Influencing Fidye Software Attack?

    If you notice that they are attacked, apply these steps in order:

    1. Disconnected device from the network: Remove the cable, turn off Wi-Fi; prevent the spread of the harmful to other devices.

    2. A cybersecurity specialist Tags: Immediately activate the corporate event intervention team or contracted security company.

    3. Report Event: You can report cyber events in Turkey to the National Cyber Events (USOM). If personal data has been affected, the data controller has to notify the Personal Data Protection Board in the late 72 hours from the moment of the breach learned (the decision dated January 2019/10).

    4. Fidyeyi payment: Armed forces do not recommend payment. It finances payment criminals, does not guarantee that the files will come back and the data will not leak.

  • Search for free password solvent: Check whether the Fidye note and a encrypted file for example; No More Ransom (nomoreransom.org) is a free tool on the site.

  • Restore from clean system: If there is a backup, clean the system or install it from scratch, then restore the data. The attack is repeatable if you restore the way to leak.

  • Fidye software is one of the biggest cyber threats of today and can lead to major financial and spiritual losses. You can greatly reduce this risk with accurate measures.

    Summary: Take offline backup and restore, delay updates, open MFA and be careful against suspicious emails. These four habits provide the most effective protection against ransomware software.

    Receiving measures for cybersecurity Remember!

    Frequently Asked Questions

    Will my files come back if I pay Fidye?

    No guarantee. Armed forces do not recommend payment; the payment is funded by criminal organizations, and the password solvent will work, the data will not be leaked. Even if it was paid in some attacks like NotPetya, data could not be recovered.

    Is Fidye software transmitted to the phone?

    Yes. Mobile ransomware software usually comes with applications installed outside the official store and encrypts screen locks or files. Download apps from only official stores and keep your phone updated.

    Does the Antivirus ransomware software prevent alone?

    No. Antivirus captures known pests but entries with new types or stolen password can not always stop. It is useful to work with updates, MFA and offline backup.

    Where should I notify Fidye software attack?

    You can report cyber events in Turkey to USOM. If personal data is affected in the attack, the data controller has to notify the Personal Data Protection Board at the latest 72 hours from the moment he learned the situation.

    Can encrypted files be saved for free?

    Sometimes. The No More Ransom project, leading by Europol and the Dutch police, offers free encrypted solvents for key-treated species. Hide Fidye note and a encrypted file example, check the type on the site.

    Is the cloud backup enough?

    Not alone. A folder synced with the computer can also move encrypted files into the cloud. A backup and network with version history must be held separately, at least one copy kept offline.

    Fidye software (ransomware) is a malware that often wants to pay with cryptocurrency to encrypt or lock files on the computer or the network of the institution. The most effective protection is paid to regular and offline backup, updates loaded without delay, multi-factor authentication and suspicious emails. If you are attacked, separate the device from the network, pay the ransomware and report the event. Last update: 23.10.2026 These attacks can target individual users, small businesses, large companies, hospitals and public institutions. Since 2019, many group files play data before encryption and threaten to publish if they are not paid (double blackmail). Some groups rent ransom software to others with subscription (Ransomware-as-a-Service). That’s why risk isn’t alone data loss, data leakage is also. Fidye Software Types Fidye software can be in different types: Locker Ransomware : It does not allow the user to do any transactions by locking the whole device. Usually the system remains locked until the ransom is paid. Crypto Ransomware : It prevents access by encrypting files on computer. You need a special key to open encrypted files. Tags : It is scared by showing false viruses or illegal content alert and wants money under the name “cleanness” or “ceza”. Most often files are really encrypted. Doxware (Leakware) : Instead of encrypting files or blocking sensitive data together with encryption and threatens to publish if not paid. Mobile Ransomware : It makes encryption or locking process by targeting mobile devices. Working Principle of Fidye Software Fidye software usually follows these steps: Ways to Contain : Oltalama e-mails and attachments enter the system with fake software updates, unloaded security clears, remote desktop (RDP) connections to the internet and stolen passwords. Encryption : It prevents access by encrypting files or all system on computer. Fidye Demand : Leaves a note on the screen; if it is not paid within a certain period, it tells that the switch will be deleted or published by stolen data. Payment & Conclusion : In some cases the files can be opened when ransom is paid, but the attackers are not guaranteed to always be faithful to the word. Important Fidye Software Attacks WannaCry (2017) : It started in 12.05.2017; more than 300.000 computers in about 150 countries. Microsoft was published in March 2017 (MS17-010) used a Windows deficit with EternalBlue tool. Harm forecasts vary from hundreds of millions of dollars to 4 billion dollars according to calculated drying. Copyright © 2018. All Rights Reserved. : He aimed at Ukraine but also spread to global companies such as Maersk, Merck and FedEx TNT Express. Although Fidye note was actually an eraser (wiper) software that imposes data irreversibly; even those who pay could not recover their data. According to the US White House consultant, the total damage exceeds 10 billion dollars. Ryuk (after 2018) : Hospitals, school systems and public institutions have targeted large organizations. Often it was activated after being leaked into the network with pests such as TrickBot and Emotet, and it worked to disable weeks and hide backups. Ways to Protect from Fidye Software The basis of protection backup, update and identity security. Quickly check with the table below, then proceed to steps: Home Why work offline k Saldurganlar spares also target; the most reliable way of separate copy return from the network. Updates WannaCry spreads the patch from a Windows vulnerability that has been released two months ago. Multi-factor authentication (MFA) It makes it difficult to log in remotely with stolen password. Closed RDP Unnecessarily remote desktop is a frequent used entrance gate. Awareness Oltalama emails are still one of the most common ways of contamination. 1. Implement a Strong Cyber Security Policy Keep up-to-date Antivirus and firewall (firewall) software. Avoid unsecured links and click on additional files. Gives awareness on team and self cybersecurity. 2. 2. Regular Backup Apply the common 3-2-1 rule: at least 3 copies of the data, in 2 different environments, 1 one separate from the network and in another place. Keep at least one backup offline; aggressive backups work to encryption. Reloading back from the backup regularly. 3. How to Fix Updates Update the operating system and all the software you use regularly; open the automatic update if possible. Upload security patches, especially VPN and remote access tools without delay. Stop using the finished operating systems. 4. Team and Self-existing Be careful about suspicious emails, links, and file attachments; especially with suspicion of messages that rush. Download software from unknown or unreliable sources. 5. Improve Network Security Use multi-factor authentication (MFA) on remote access and email; if not required, close RDP to the internet. Use a security information and event management system that follows suspicious events in corporate networks. Always monitor ne

    Etiketler:yapay zeka
    Masqot Community
    Masqot CommunityCreator
    @masqot

    Comments (0)

    Log in to comment.

    Log in
    No comments yet. Be the first to comment!