{"id":53805,"date":"2022-06-21T09:00:33","date_gmt":"2022-06-21T07:00:33","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=53805"},"modified":"2022-06-21T09:07:02","modified_gmt":"2022-06-21T07:07:02","slug":"nakivo-recover-from-a-ransomware-attack","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/nakivo-recover-from-a-ransomware-attack\/","title":{"rendered":"Nakivo: recover from a Ransomware Attack"},"content":{"rendered":"

\"nakivo-recover-from-ransomware-attack-01\"<\/p>\n

When an organization suffers a ransomware attack, your systems and data are encrypted with the scope of demanding ransom for decrypting the files<\/strong>.<\/p>\n

Without a good data protection strategy<\/a>, victims of a ransomware attack are forced to pay a ransom to avoid data loss<\/strong> and keep the business alive. What if you pay the ransom and the decryption key is not provided?<\/p>\n

Data protection<\/strong>\u00a0and an effective restore procedure<\/strong> against a ransomware attack are the key to ensure integrity and availability of your data.<\/p>\n

 <\/p>\n

The backup strategy<\/h2>\n

To secure your business data there is only one thing to do, an efficient backup. You must have an effective backup strategy configured<\/strong> in your organization to quickly recover your data in case of problems.<\/p>\n

 <\/p>\n

Meet the 3-2-1 backup rule<\/h4>\n

A working backup is the key for having your data protected and available. If the backup infrastructure configured in your organization meets the 3-2-1 backup rule<\/strong>, multiple copies of your backups are stored in different locations\/media<\/strong> (onsite, offsite, tapes) and available to recover.<\/p>\n

\"nakivo-recover-from-ransomware-attack-02\"<\/p>\n

 <\/p>\n

Use an immutable repository<\/h4>\n

The use of an immutable repository (local or cloud storage) is the most efficient way to keep your data backup protected against deletion, changes or overwriting<\/strong>. In case of a ransomware attack, the backup files cannot be altered in any way.<\/p>\n

You can configure a hardened repository as local Linux-based storage<\/a> (hardened VA or AMI) or taking advantage of cloud storage solutions such as Amazon S3 with Object Lock<\/a> or Wasabi<\/a>.<\/p>\n

\"nakivo-recover-from-ransomware-attack-03\"<\/p>\n

 <\/p>\n

Backup verification<\/h4>\n

The backup verification<\/strong> is an important point to ensure your backups are good and can be recovered<\/strong>. This process ensure that backups, replicas and backup copies can be booted properly<\/strong>. The Instant verification<\/a> feature can be used to check if your backed up VMs can be recovered.<\/p>\n

\"nakivo-recover-from-ransomware-attack-04\"<\/p>\n

 <\/p>\n

Recover from a ransomware attack<\/h2>\n

Backing up your data is only the first part of the data protection strategy. You need also a quick way to recover your data<\/strong> in case of site failure or ransomware attack.<\/p>\n

If something horribly wrong happens to your VMs, it is essential for the business that all services and data are recovered and made available as quick as possible<\/strong>.\u00a0Modern software solutions provide all the capabilities that help the administrators to recover the system functionality<\/a> in a matter of seconds.<\/p>\n

 <\/p>\n

Failover to replicas<\/h4>\n

If the ransomware didn't affect your DR site (if you have one), available replicas can be used to recover the main services<\/strong> with the\u00a0lowest RTO<\/a> possible. To ensure availability of your data the Site Recovery<\/a> capability has been designed to\u00a0ensure business continuity<\/strong>\u00a0minimizing services disruption.<\/p>\n

To ensure business continuity minimizing services disruption, you must have a working DR plan in place:<\/p>\n