Backup hijacking (T -00.10)

Shortly after, the ransomware attacks the files and folders with backup copies in the victim’s system and deletes them to ensure that the backup copies cannot be used to recover the data. This is unique to ransomware: other fraudulent software do not eliminate backup files.

Go Back