> Most of these start as phishes to lower level employees. They used to (and probably still) do this. But more recently these folk are paying access brokers. A

> Most of these start as phishes to lower level employees. They used to (and probably still) do this. But more recently these folk are paying access brokers. A bit like bank robbers teaming up with criminal locksmiths. > It makes sense to me that’ll happen again and I’m not sure I can say the solution is better backups. You'll ideally need: - Better security awareness training to cover human weakness such as spotting dodgy email and what to do if you click a link - Patch vulnerabilities quickly as this will reduce risk considerably - Company wide tested and sufficient backup strategy (most companies fail on this) to protect key identified data assets - Regularly pen-test both your internal and external environments Obviously it doesn't stop there, but those are key.