Friday, June 4, 2021

So much for those backups

from here

While Exagrid did have to go back and ask for the decryption tool a second time (apparently not only did their backup solution work to restore their data, they didn't manage to make a backup of the decryption tool either), they would have been in a bind even if their technology had been able to work for them because ransomware doesn't just encrypt data anymore - the operators make their own backups of your data and threaten to expose it if you don't pay up. 

Unfortunately, while restoring from backups is absolutely the ideal approach to getting your data back, it's frequently no longer sufficient for dealing with ransomware incidents because of the added blackmail approach.