Originally Posted by stealthn (Post 11336095)

A good hacker/malware goes after the backups as well. As someone that does security as part of my job people would be shocked at how much is going on all day, everyday. Your Internet is constantly being probed, I could go on for days on this, really coordinated groups/Govs do their research on your website, social media, etc. I see company websites that show the type of control systems a company uses and sure enough they are constantly scanned for those control system ports on all their public IP’s.

Of course it’s so much easier just to drop something via a phish email, or just social engineer a company: https://youtu.be/lc7scxvKQOo

Originally Posted by asphaltgambler (Post 11336535)

But isn't the data overwritten at some point in the backup? Say your network information is completely backed up overnight for say 1 week straight. Then the next back up is completely overwritten?

Originally Posted by flipper35 (Post 11336834)

The higher end disaster recovery stuff is a little better insulated against being infected but even those can get infected as well because sometimes you are infected for weeks to months and don't know it. By the sounds of it this company did not have state of the art stuff and just paid/had insurance pay the ransom to cut down on recovery time.

Originally Posted by Nostril Cheese (Post 11335205)

Like you'd turn her down in any instance. right.... =)

Originally Posted by Tobra (Post 11337034)

I would turn her down in every instance. I find her repellent.