How to act during an ongoing ransomware attack
security.stackexchange.com