3 ms·
Not just their security, their backup policies too, right? Ransomware is completely powerless if you can delete and restore. You'd think investing in backup sys
by user3939382 3y ago
Not just their security, their backup policies too, right? Ransomware is completely powerless if you can delete and restore. You'd think investing in backup systems, policies, training, monitoring, which is best practice anyway, is cheaper than the horrible PR and costs of these ransoms.
- Veserv 3y agoThey just hack the backups as well. Adds like 10% to their costs because those systems are also completely insecure. Even a perfect backup system is easy to beat. You just infiltrate the running system and encrypt the dataflow into the backup system after you get in, do that for a few months, then strike; now they have to restore from multiple month old backups which is basically just as good. Before you say that infiltrating for multiple months is unrealistic, that is actually industry average. It usually takes a few months to years to detect a active infiltration that is actively siphoning all data out of your systems as fast as it is being generated. That is not even a largely quiescent system like the backup encrypter, that is actual high bandwidth egress remaining undetected for months.
- amelius 3y agoA perfect backup system would include testing on an airgapped system.
- j_walter 3y agoThey have backups...most companies do. That is why these ransomware groups have turned to extortion instead...don't pay and we expose your sensitive info to the world. No amount of good backup policies can block a group from releasing this info.