Re:New Mac ransomware spreading through piracy
by 14 on Wednesday July 01, 2020 @09:28AM
(#23701059)
Are there any versions of malware that sit and wait for several months so that once you have it in your backups it sits and waits for you to save over your old back up and then starts it’s thing? Then if you restore from that backup you have the malware sitting waiting again to start.
[ Parent
| on HN ]
Re:New Mac ransomware spreading through piracy
by vladvasiliu on Wednesday July 01, 2020 @01:22PM
(#23704017)
How would that work? If it didn't encrypt your active storage, then the backups wouldn't be encrypted either, right? Or would it somehow interfere with the backups, making you think the backup's OK when it actually is just garbage and then encrypt your active drive when no more usable backups exist?
I guess that's one reason why if you don't try restoring from you backups it's as good as not having any...
Re:New Mac ransomware spreading through piracy
by cutemonster on Wednesday July 01, 2020 @09:38AM
(#23701157)
Can that be worked around by having extra backups with only non executable files? Like txt, png, cpp (but without compiling and running)?
I have a vague memory of ransomware that waited for one to mount external disks yes, but not as advanced as they ones you mentioned