Ransomware files are:

Correct answer: Encrypted. Ransomware encrypts the victim’s files and demands money to unlock them.

Background: The name comes from “ransom”, money demanded for release.

• Deleted: Ransomware usually locks files rather than deleting them.
• Copied: The attacker locks, not just copies, the files.
• Hidden: Hidden files are not the main feature of ransomware.

Did you know? Regular backups are the best protection.

Memory trick: Ransom → files locked (encrypted).