Ransomware attacks on client side