Ransomware is malicious software that encrypts files or locks users out of their systems, demanding payment for decryption or access. It typically spreads through phishing emails, malicious attachments, or exploit kits.