Aller au contenu principal

Acronis True image and ransomware

Thread needs solution

Hi every one. 

I have only one question. Can ransomware encript created Acronis backup files?

I have separate HDD for my backup files, in an event of ransomware atack, are my files safe?

Thanks. :D

0 Users found this helpful

If your Acronis file is accessible and the ransomware attack is not detected, then it could be encrypted. I prefer to keep my backup disks offline as much as possible.

Hello Bruno!

I know only the paranoid survive, but isn't this the exact reason why Acronis integrated malware protection into itself?

-- Peter

My backup are stored on maped network disk and yes, they are accessible.

I think i will switch to Urbackup solution, this thing backups files to Windows Server PC automaticaly and files can only be accesed via web browser.

Thanks.

If any malware gets a foothold on a system, then any mapped network drives etc are going to be targets for it.

Acronis Active Protection, when enabled, is intended to help prevent ransomware attacks on Acronis backup files but this also involves the user in deciding what processes are allowed to run and whether they are allowed to touch these files!

The safest backup is always going to be one stored offline / disconnected from any PC or network, but that isn't always practical as it cannot be updated until reconnected etc!

The Advanced & Premium subscription versions of ATI 2021 include additional protection features in the form of Acronis Cyber Protection which replaces other third-party antivirus applications (if allowed), so offers a greater level of protection, but this too depends on the user behaviour, as do all such applications!

Storing backup data in cloud solutions sounds like it offers some separation from potential malware threats, but this can be a false assurance if files are synchronised or updated in the cloud from a system that has already been infected, where the infection is propagated to any remote locations!  Any protection for such data would require antivirus / malware scanning of the data being synched / uploaded, but this cannot inspect encrypted data (recommended for data stored remotely!).

Valentin,

I had a look at Urbackup.  I do not find it to be any more secure from a ransomware attack than any other secured network attached storage device as long as that device uses client/server authentication and SMB protocol SMB 2.0 or above.

Another caveat I see is that of restore.  I only find instructions on restore to a VM client.  I do not see instruction on restore to a physical disk.  There is brief mention of a bare metal restore however that relates to a VM as well.

I would proceed with caution.