Know Your Enemy

Ransomware is a $1 billion business that often evades traditional anti-malware. Learn what you’re up against and how to stop it.

Stop Ransomware Now

Sophos Intercept X is proven to stop ransomware in its tracks, including all Wanna and Petya variants, by blocking the unauthorized encryption of files.

Stop Ransomware with Sophos Intercept X

The proven CryptoGuard capabilities in Sophos Intercept X block ransomware - including all Wanna and Petya variants – as soon as it starts trying to encrypt your files, returning data to its original state:

  • Protects endpoints from ransomware attacks
  • Automatically rolls back encrypted file changes with no loss of data
  • Stops both local and remote file encryption


Get Under the Skin of Ransomware


Anti-Ransomware Resources for You and Yours

This free anti-ransomware kit is packed with useful information for IT Managers as well as tools to educate users on the threat, including:

  • Anti-ransomware security checklist
  • How to stop ransomware whitepaper
  • Posters for your workplace
  • PPT presentation to educate employees
  • Recorded webinar for employees
  • Email promoting webinar

Get Complete Ransomware Protection

To maximize your protection against ransomware use measures to stop the threat at every point in your security infrastructure





Sophos Server protection blocks the unauthorized encryption of your high value server files with no loss of data.
CXmail in Sophos Email Appliance blocks emails with ransomware macro attachments while Time-of-Click protection stops users clicking through to infected websites.
Sophos Intercept X gives you the best anti-ransomware protection available, stopping the unauthorized encryption of files with no loss of data.
Sophos Web Appliance blocks ransomware downloads and uploads, plus URL filtering blocks websites hosting ransomware and their command and control servers.

Learn More about Ransomware

In the News


Anti-Ransomware Settings for Sophos Products

Sophos solutions defend you against ransomware and other
advanced threats. Make sure you apply the best practice
settings for maximum protection.