When you’re hit by a ransomware attack, it’s tempting to think that just restoring from backup can make the problem go away — but according to DataGravity CEO Paula Long, it’s not necessarily that simple.

While backups can be key to recovering from ransomware, Long told eSecurity Planet, restoring correctly may be more complex than you expect. “First of all, you have to figure out what it is you have and what’s been damaged — and if you don’t have everything in place, that can be a time-consuming process,” she said.

If the damage is significant enough that you have to do a full restore, you may sidestep the ransomware itself, but be left not knowing what data may have been lost or changed since the last backup. “So now you’ve got sanctioned data loss, and you don’t know what happened,” Long said.

Even more importantly, Long said, there’s a decent chance your backup is infected with ransomware as well.

…

http://www.esecurityplanet.com/malware/beyond-the-backup-defending-against-ransomware.html