Why Ransomware Targets Backups

Promotional onsite service charge of $49/per visit to solve your IT Issues

Applicable to SME only

Contact us via whatsapp Icon at the Bottom Left

  • Risks of Ransomware
  • Ransomware attacks can be particularly damaging if they target and successfully encrypt backups of data, as this can make it more difficult for the victim to recover from the attack.

    Some types of ransomware have been specifically designed to target and encrypt backups in order to increase the chances that the victim will pay the ransom.

    To protect against ransomware attacks that target backups, it is important to have a robust backup strategy in place that includes multiple copies of your data, stored in different locations.

    For example:

    You might have one copy of your data stored on an external hard drive that is disconnected from your network when not in use, and another copy stored in the cloud.

    This can help ensure that you have a clean copy of your data that you can use to restore your systems in the event of a ransomware attack.

    In additional to having multiple copies of your data, it is also important to regularly test your backups to ensure that they are working properly and that you are able to access and restore your data if needed. Finally, it is a good idea to keep your backup software and systems up to date with the latest security patches to help protect against ransomware and other threats.

    Examples of Ransomware Specifically Targeting Backups

    In 2020, the ransomware strain known as “Maze” was used in a number of attacks that targeted backups as well as live data. In one such attack, the ransomware encrypted the backups of a Texas-based law firm, resulting in the loss of years’ worth of data.

    In 2019, the ransomware strain known as “Ryuk” was used in an attack on the city of New Orleans that targeted and encrypted the city’s backups, making it more difficult for the city to recover from the attack

    In 2018, the ransomware strain known as “LockerGoga” was used in an attack on the Norwegian aluminum producer Norsk Hydro. The ransomware encrypted the company’s backups as well as its live data, causing significant disruption and financial losses for the company.

    These examples illustrate the importance of having a robust backup strategy in place that includes multiple copies of your data, stored in different locations, and regularly testing your backups to ensure that they are working properly.

    Why ransomware targets backups

    Scroll to top