Ransomware increasingly seeks and deletes backups before encrypting files. Cloud storage, network-attached storage, and local backups can be compromised. By disabling recovery options, attackers force victims to pay. Sophisticated ransomware scans for shadow copies and connected drives. This evolution makes traditional backup strategies vulnerable.
It matters because effective defense requires layered, isolated backups. Simple backups aren’t enough.
It also emphasizes proactive monitoring and segmented storage.
Modern ransomware targets backups before encrypting data.
[Symantec, symantec.com]