Comments on: Defeating CryptoLocker Attacks with ZFS https://www.truenas.com/blog/defeating-cryptolocker-attacks-with-zfs/ Fri, 16 Feb 2024 17:39:54 +0000 hourly 1 https://wordpress.org/?v=6.4.4 By: Carlos https://www.truenas.com/blog/defeating-cryptolocker-attacks-with-zfs/#comment-5283 Mon, 19 Feb 2018 12:41:22 +0000 http://web.freenas.org/whats-new/?p=1189#comment-5283 In reply to TrevorX.

ZFS is as important to the equation as the VM:
“ZFS is really not doing anything special beyond what it usually does – provide 100% confidence in data reliability” should be”
should be:
ZFS is really not doing anything special beyond what it usually does – provide 100% confidence in data reliability and SNAPSHOTS
They key being that crypto locker attacks work at the file systems level and not on the block level (which is how ZFS stores its snapshots)

]]> By: Michael Dexter https://www.truenas.com/blog/defeating-cryptolocker-attacks-with-zfs/#comment-5282 Thu, 12 Nov 2015 21:38:46 +0000 http://web.freenas.org/whats-new/?p=1189#comment-5282 In reply to TrevorX.

Because the CryptoLocker attacks are constantly evolving and do not require administrative privileges, there is no guaranteed means of preventing such attacks but there are there is a proven remedy. This remedy extends beyond VM snapshots to file shares and given how many CryptoLocker-style attacks go after backups such as those on DropBox, this is still one of the best options available.

]]> By: Michael Dexter https://www.truenas.com/blog/defeating-cryptolocker-attacks-with-zfs/#comment-5281 Thu, 12 Nov 2015 21:24:23 +0000 http://web.freenas.org/whats-new/?p=1189#comment-5281 In reply to Reese Frier.

Feel free to contact sales@ixsystems.com and the Michael Lucas and Allan Jude webinar describes quite a few other benefits.

]]> By: Reese Frier https://www.truenas.com/blog/defeating-cryptolocker-attacks-with-zfs/#comment-5280 Sun, 25 Oct 2015 03:48:40 +0000 http://web.freenas.org/whats-new/?p=1189#comment-5280 Looking to learn more about ZFS and how it can help our business.

]]> By: TrevorX https://www.truenas.com/blog/defeating-cryptolocker-attacks-with-zfs/#comment-5279 Fri, 11 Sep 2015 14:12:36 +0000 http://web.freenas.org/whats-new/?p=1189#comment-5279 Calling this Defeating CryptoLocker with ZFS is rather disingenuous. What you’re really doing is ensuring you have sufficient granularity of backups that you can go pretty much within a half hour window of when an attack commenced and reliably roll back to that point, because of VM snapshots. Sure, the NAS is obviously an important part of the equation, but running a virtualised environment is the main strength here. ZFS is really not doing anything special beyond what it usually does – provide 100% confidence in data reliability. But it is a huge stretch to say it is the crux of the solution; it simply isn’t, and pretty much exactly the same recovery safeguard could be implemented without it.

]]>