Why backups are not the panacea for recovery from a ransomware attack | SC Media

Why backups are not the panacea for recovery from a ransomware attack | SC Media

A man walks through a server farm. The most pervasive wisdom about preventing damage from ransomware is to backup systems, but that alone may not be enough. (Amy Sacka for Microsoft)

The most pervasive wisdom about preventing damage from ransomware is to backup systems. FujiFilm and Colonial Pipeline in fact, restored from back-ups. So in an era of increased concern about ransomware, is solving the ransomware scourge as simple as investing in some backups?


“If it was that easy, it just wouldn’t be an issue,” said Riley Stauffer, security and incident response analyst at managed detection and response firm Pondurance.


Indeed, recovering from ransomware can be tough. Backups can make it easier. But they can’t make it easy. Backups can be damaged, untested, prohibitively difficult to deploy, encrypted by attackers, or restore to the same breached state they backed up. They don’t rid hackers from systems. They don’t address secondary forms of disruption.


In fact, the law firm BakerHostetler calculated that 20% of its clients who restore from backups also end up paying the ransom. Executives from Colonial Pipeline and Mandiant, ..

Support the originator by clicking the read the rest link below.