Don’t Wanna Pay Ransom Gangs? Test Your Backups.
Summary: Emsisoft CTO Fabian Wosar told Krebs on Security that the most common reason ransomware victims pay for decryption keys despite having backups is that they never tested how long a restore would take, sometimes discovering petabytes of data would need three months to download. Wosar cited two other frequent failures: decryption keys stored on the same file-sharing network the ransomware encrypted, and, more rarely, backups corrupted by the attackers themselves.
What's compelling: Coveware's Bill Siegel described victims with 50 petabytes of backups 30 miles away who, restoring over copper wire, calculated the job would take 69 years - and Wosar noted many companies do not even know their network dependencies or the order in which systems must be restored.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026