Cloud storage is not the same as cloud backup and, consequently, anything that syncs or mirrors your data is toast. Obviously, common backup solutions simply aren’t robust enough to protect you from a ransomware attack. Then, when you restore your computer, you should have the option of going back far enough that your backup predates the infection. Use a backup tool that saves multiple timestamped versions of your files. “Versioning is a key strategy to ensure recovery from a ransomware attack,” said Dror Liwer, founder of security company Coronet. This is because your system might already be infected with malware when you run a backup. Even if you disconnect your external drive, there’s no guarantee it will remain protected. If the drive is attached, the ransomware can now have access to these backups which will render them useless, as they’ve become encrypted along with other files.” Yes, this is inconvenient, and it takes discipline to connect a drive manually and trigger a backup. “This will prevent the backups from being encrypted if the ransomware executable is loaded onto the network, and the storage device is offline outside of the encryption process. “It’s crucial that the local storage drive is not kept attached to the network,” said Congionti.

For example, if you back up to an external hard drive, only connect it during the regularly scheduled back up, and then disconnect it again immediately afterward. A solid weapon against ransomware is to use a backup media you can air gap, meaning it’s completely disconnected from your computer and the internet. Disconnect your backup from the network.There’s nothing wrong with this kind of backup for traditional threats, but it should not be your only line of defense to protect your data.

They’re only of value for a more old-fashioned and conventional disaster, like a hard drive failure. If you back up to an internal or external hard drive that’s constantly connected to your PC, or the cloud, consider those files already dead. Assume ransomware will encrypt or delete anything you can access from your PC.Start with these three guiding principles for backups: So, you can take steps right now to ensure you can recover painlessly from a ransomware attack. The first option is problematic for moral, ethical, financial, and logistical reasons. If your system is infected with ransomware, you can either pay the ransom and hope you get your files back, or not pay and try to reconstruct your PC from backups.

It’s a jungle out there! How to Protect Your Backups From Ransomware

Carbonite pro and crypto locker