{"id":19003,"date":"2026-10-22T21:02:25","date_gmt":"2026-10-22T18:02:25","guid":{"rendered":"https:\/\/www.hyyat.com\/knowledgebase\/ransomware-protect-website-server\/"},"modified":"2026-10-22T21:02:32","modified_gmt":"2026-10-22T18:02:32","password":"","slug":"ransomware-protect-website-server","status":"publish","type":"docs","link":"https:\/\/www.hyyat.com\/en\/knowledgebase\/ransomware-protect-website-server\/","title":{"rendered":"Ransomware: How to Protect Your Website and Server From It"},"content":{"rendered":"
\n
In short<\/b>Ransomware encrypts your files and databases, then demands money for the decryption key. On websites and servers it usually arrives through a stolen password or a flaw in outdated software. The most important protection is not only stopping the attack, but having a recent backup outside the server that the attacker cannot reach. With it, you restore your site without paying.<\/div>\n
\"Ransomware:<\/figure>\n

Ransomware is associated with company computers and hospitals, but it hits servers and websites too. The usual story: an attacker gets into a server with a weak password, encrypts the website files and databases, and leaves a text file demanding payment in cryptocurrency. If the backups sit on the same server, they are usually encrypted or deleted as well.<\/p>\n

How does it reach a server or website?<\/h2>\n
\n
1<\/i>A weak password<\/b>SSH, control panel or remote desktop access with a guessable password. Read strong passwords<\/a>.<\/span><\/div>\n
2<\/i>Outdated software<\/b>A known flaw in the operating system, control panel or an application not updated.<\/span><\/div>\n
3<\/i>A backdoor in a site<\/b>A malicious file in a hacked site used to run commands on the server. Read C99 shell<\/a>.<\/span><\/div>\n
4<\/i>An infected computer<\/b>The administrator\u2019s computer is infected, so saved passwords are stolen.<\/span><\/div>\n<\/div>\n

The most important defence: the right backups<\/h2>\n

A backup that helps against ransomware has three qualities:<\/p>\n

    \n
  1. Off the server:<\/b> Somewhere that whoever controls the server cannot reach.<\/li>\n
  2. Several dates:<\/b> Copies from several days, because you may not notice the infection the same day.<\/li>\n
  3. Tested:<\/b> You have restored from it at least once and know how long it takes.<\/li>\n<\/ol>\n

    The well-known rule: three copies of your data, on two different types of storage, with one off-site. Read why backups matter<\/a>.<\/p>\n

    Steps that lower the risk<\/h2>\n