Skip to content
Ransomware

One click is enough.
Everything stops.

Understand the speed of a ransomware attack: intrusion, propagation, encryption, and extortion. A visual simulation that makes you want to see it through.

Wave encryptionDouble extortionImmutable backupsCrisis plan
O
Outlook — Inbox
Subject:Invoice_March_2024.docm — needs approval

Hi Pierre, please find attached the March vendor invoice for approval before quarter-end closing.

💡 Click the attachment to simulate opening it
Step 1Initial access

An email with an attachment

The sender looks internal. The attachment is a Word file with a macro.

The .docm file silently triggers the ransomware download in the background. The user just sees a blank document — the payload is already in memory.

Key figures

0 click

To trigger access

phishing, macro, fake VPN

< 0 min

To encrypt a server

automated lateral propagation

0 phases

Exfiltration + encryption

double extortion

Immersive demo

Live through the crisis minute by minute

Enable the defenses, watch the propagation, and see how immutable backups change the outcome.

An ordinary email. An attachment. A single click is enough.

O
Outlook — Inbox
Subject:Invoice_March_2024.docm — needs approval

Hi Pierre, please find attached the vendor invoice for approval before closing.

W

Invoice_March_2024.docm

Word document with macros — 124 KB

Open →

⚡ Clicking opens the file and triggers the infection

Educational simulation — nothing here is executable.

Real-world example

WannaCry — 2017

A lightning-fast attack.

In 2017, WannaCry hit more than 200,000 machines worldwide. Hospitals, factories, and public services were paralyzed. A patch existed, but it wasn't deployed everywhere.

The lesson

Fast patching of critical systems

Network segmentation to limit propagation

Immutable backups tested regularly

What changes the outcome

EDR detection

Isolation within minutes

Immutable backups

Faster recovery

Crisis plan

Clear decision-making

Communication

Informed customers

Objective

Reduce detection time and restore without paying. Every minute saved avoids escalation.