Skip to content
HUMANWALL

Mission 13

Malware, Ransomware and Safe Software Practices

Learn how harmful software gets into a small business, why updates and genuine software matter, and what to do calmly if a computer starts behaving strangely.

14 minutesSecurity BuilderJump to scenario & quiz ↓

In this mission you will

  • Explain in plain language what malware and ransomware are and how they usually arrive.
  • Identify the safe sources for installing and updating software in your workplace.
  • Recognise the warning signs of infection and the first safe steps to take.
  • List your critical applications with an owner and update method for each.

Malware is any software designed to cause harm: to steal information, spy on activity, damage files or take control of a device. Ransomware is one type of malware. It locks or encrypts files and then demands money to unlock them. For a small business, the real cost is often not the demand itself. It is the days without billing, without stock records and without customer data. The good news is that a handful of steady habits block most of the common routes in.

How malware usually gets in

  • Email or WhatsApp attachments that look like invoices, purchase orders, courier slips or tax notices.
  • Links to fake download pages, often offering a 'free' version of paid software.
  • Pirated or 'cracked' software, key generators and activation tools shared on USB drives or websites.
  • Fake pop-ups that say 'Your computer is infected' and push you to install a cleaner or call a number.
  • Old, unpatched software and operating systems with known weaknesses that attackers already know how to use.
  • Remote access tools installed by someone pretending to be support staff.

Why updates matter

Software makers regularly release updates (also called patches) that fix security weaknesses. Once a fix is public, attackers can study it and target computers that have not updated yet. That is why delaying updates for months is risky. Software that is no longer supported by its maker gets no fixes at all, so any new weakness stays open for good. Keeping systems supported and updated is one of the simplest, most effective controls a small business has.

Safe software habits for every team

  1. 1Install software only from the official vendor, an official app store, or the person your business has made responsible for IT.
  2. 2Turn on automatic updates for the operating system, browsers and common applications where your IT owner agrees.
  3. 3Use a standard (non-administrator) account for daily work, so harmful software cannot change the whole system easily.
  4. 4Keep antivirus or endpoint protection active and updated, and do not switch it off to 'make something work'.
  5. 5Keep at least one backup that is disconnected or separately protected, and test that you can actually restore from it.
  6. 6Remove software nobody uses any more. Every unused program is something else that needs updating.

Signs something may be wrong

  • Files suddenly renamed with strange extensions, or a note on screen asking for payment.
  • The computer becomes very slow, the fan runs constantly, or programs open and close on their own.
  • Security software has been switched off without anyone doing it.
  • Colleagues or customers receive odd messages that appear to come from you.

Practical business example

The free design tool at Sharma Print Studio

Rohit works at Sharma Print Studio, a small printing shop in Indore. A customer needed a file opened in a design format the shop's software could not read. Rohit searched online and found a 'free full version' of a paid design tool. The download asked him to switch off antivirus during installation, which he did. The tool worked. Two weeks later, the billing computer, which shared a folder with Rohit's machine, showed renamed files and a payment note. The owner, Meena Sharma, did not pay. She called their IT provider, who disconnected the affected computers. Their weekly backup was on an external drive kept in a drawer, not plugged in. The shop lost two days of work but restored its billing data. Afterwards, Meena removed administrator rights from daily accounts and made one person responsible for approving new software.

The lesson: A 'free' cracked tool and a request to switch off antivirus were the warning signs. A disconnected, tested backup turned a crisis into a two-day setback.

Key takeaways

  • Install software only from official sources or through the person responsible for IT.
  • Keep operating systems and applications supported and updated; replace unsupported software.
  • Avoid pirated software: it often carries malware and cannot be safely updated.
  • Use standard accounts for daily work and keep at least one tested backup separated from the network.
  • If infection is suspected, report quickly, follow the procedure and do not pay, improvise or connect backups.

Scenario lab · +25 XP

The pop-up that wants a phone call

You are working on the accounts computer at Patel Agro Traders when a full-screen pop-up appears. It flashes red, plays a warning sound and says: 'Your computer is infected! Call Official Computer Support now on this number or download our cleaner to protect your data.' The browser seems stuck.

Fictional scenario. Never enter real passwords, OTPs or customer details anywhere in this course.

Decision 1 of 2

What do you do first?

Knowledge check · +20 XP on mastery

Check your understanding

1. What should you do if you suspect ransomware on a work computer?
2. Why is pirated or cracked software a security risk?
3. Why is using a standard (non-administrator) account for daily work helpful?
4. Which backup approach gives the best chance of recovering from ransomware?

Practical action · +40 XP (self-reported)

Build your critical software list

Spend 20 minutes with the person who looks after IT to create a simple list. Do not record any passwords or licence keys in it.

  1. 1.List the applications your business cannot run without (for example accounting, billing, email, design or point-of-sale software).
  2. 2.For each, note who owns it, where it was obtained from and how it gets updated (automatic, manual or by a vendor).
  3. 3.Flag any software or operating system that is no longer supported, or any copy that is not genuine.
  4. 4.Check which daily-use accounts have administrator rights and agree which ones can move to standard accounts.
  5. 5.Confirm where your backup is kept, whether it is separated from the network, and when a restore was last tested.
  6. 6.Agree a date to fix the top one or two flagged items.

Do this in your own records. Don’t enter passwords, OTPs, customer data or incident details here.

Mission status: Not started

A mission is complete when you have read the lesson, answered the knowledge check and acknowledged the practical action. Mastery means scoring at least 3 of 4 on the knowledge check.

View my progress