{"id":2708,"date":"2013-11-05T00:00:00","date_gmt":"2013-11-05T00:00:00","guid":{"rendered":"http:\/\/otava.test\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/"},"modified":"2013-11-05T00:00:00","modified_gmt":"2013-11-05T00:00:00","slug":"offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker","status":"publish","type":"post","link":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/","title":{"rendered":"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker"},"content":{"rendered":"
\"Cryptolocker
Cryptolocker Screenshot; Source: Arstechnica.com<\/figcaption><\/figure>\n

Malware with a business plan – that\u2019s how I\u2019d describe Cryptolocker, the latest encryption-turned-bad software to hit PCs. Categorized as \u2018ransomware,\u2019 this type of malware encrypts files on your computer and refuses to decrypt until you pay the malware authors a fee. What\u2019s worse is the threat of permanent deletion if you don\u2019t pay – the malware displays a countdown timer that shows you how long you have to pay up until your files are gone forever, as ThreatTrackSecurity.com reports. This malware is delivered via email attachments.<\/p>\n

According to PCWorld.com, Cryptolocker uses public-private key cryptography to encrypt files, and it\u2019s impossible to decrypt without the keys they hold. After your time is up (72 hours), the unique decryption key for the files are automatically destroyed. All they ask for is 300 USD\/EUR. You can even pay in Bitcoin. They also take payment via MoneyPack, a prepaid card. Arstechnica.com reports that Symantec estimates their haul to be over $5 million a year.<\/p>\n

Their latest service gives you another option if your antivirus detects the malware after files are encrypted and deletes the malware before you were able to buy the decryption keys – however, this takes a bit longer for them to recover your data and is much more costly – it\u2019ll run you about 10 Bitcoins. This is because they need to search for an associated private key and run a brute force attack against themselves in order to find a stored private key that will unlock your data, as Paul Ducklin from Sophos reports.<\/p>\n

How can you protect yourselves from ransomware? Back up your data regularly and have a solid IT disaster recovery<\/a> plan in place. Better yet, encrypt your backups as they\u2019re archived and locate them in an offsite data center. Sending data offsite ensures a copy of your critical data is available in the event of a disaster at your primary site, and it is considered a best practice.<\/p>\n

\"Offsite<\/p>\n

Here are some tips from our Disaster Recovery white paper<\/a> about outsourcing offsite backup<\/a> and why it might be a good option to protect against malware that takes your data hostage:<\/p>\n

Outsourcing your offsite backup to a managed services<\/a> provider can provide your organization with continuous data protection and full file-level restoration, and offload the burden of installing, managing, monitoring as well as complete restoration after a disaster.<\/p>\n

With a vendor, your encrypted server files are sent to an onsite backup manager (primary site), which are then sent to a secondary, offsite backup manager, ideally far enough apart to reduce the chances of the secondary site being affected by the same disaster or interruption.<\/p>\n

While offsite backup managed in-house can be costly due to building out, maintaining and upgrading both primary and secondary sites, outsourcing your offsite backup to professionals means you can take advantage of their investments in capital, technology and expertise.<\/p>\n

As NIST (National Institute of Science and Technology) states, backup media should be stored offsite or at an alternate site in a secure, environmentally controlled facility. An offsite backup data center<\/a> should have physical, network and environmental controls to maintain a high level of security and safety from possible backup damage.<\/p>\n

References:
\nCryptoLocker creators try to extort even more money from victims with new service<\/a>
\nCryptolocker: Time to Backup<\/a>
\nCryptoLocker ransomware crooks offer “late payment penalty” option<\/a>
\nYou\u2019re infected\u2014if you want to see your data again, pay us $300 in Bitcoins<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Malware with a business plan – that\u2019s how I\u2019d describe Cryptolocker, the latest encryption-turned-bad software to hit PCs. Categorized as \u2018ransomware,\u2019 this type of malware encrypts files on your computer and refuses to decrypt until you pay the malware authors a fee. What\u2019s worse is the threat of permanent deletion if you don\u2019t pay – the malware displays a countdown timer that shows you how long you have to pay up until your files are gone forever, as ThreatTrackSecurity.com reports. This malware is delivered via email attachments. According to PCWorld.com, Cryptolocker uses public-private key cryptography to encrypt files, and it\u2019s impossible to decrypt without the keys they hold. After your time is up (72 hours), the unique decryption key for the files are automatically destroyed. All they ask for is 300 USD\/EUR. You can even pay in Bitcoin. They also take payment via MoneyPack, a prepaid card. Arstechnica.com reports that Symantec estimates their haul to be over $5 million a year. Their latest service gives you another option if your antivirus detects the malware after files are encrypted and deletes the malware before you were able to buy the decryption keys – however, this takes a bit longer for them…<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"other_category":[],"class_list":["post-2708","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nOffsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker | OTAVA<\/title>\n<meta name=\"description\" content=\"Here's how disaster recovery and offsite backup can help mitigate the potentially devastating losses from Cryptolocker ransomware.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker\" \/>\n<meta property=\"og:description\" content=\"Here's how disaster recovery and offsite backup can help mitigate the potentially devastating losses from Cryptolocker ransomware.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/\" \/>\n<meta property=\"og:site_name\" content=\"OTAVA\" \/>\n<meta property=\"article:published_time\" content=\"2013-11-05T00:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg\" \/>\n<meta name=\"author\" content=\"Irma Brillantes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Irma Brillantes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/\"},\"author\":{\"name\":\"Irma Brillantes\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263\"},\"headline\":\"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker\",\"datePublished\":\"2013-11-05T00:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/\"},\"wordCount\":593,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.otava.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/\",\"url\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/\",\"name\":\"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker | OTAVA\",\"isPartOf\":{\"@id\":\"https:\/\/www.otava.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg\",\"datePublished\":\"2013-11-05T00:00:00+00:00\",\"description\":\"Here's how disaster recovery and offsite backup can help mitigate the potentially devastating losses from Cryptolocker ransomware.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#primaryimage\",\"url\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg\",\"contentUrl\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.otava.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.otava.com\/#website\",\"url\":\"https:\/\/www.otava.com\/\",\"name\":\"OTAVA\u00ae\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.otava.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.otava.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.otava.com\/#organization\",\"name\":\"OTAVA\u00ae\",\"url\":\"https:\/\/www.otava.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg\",\"contentUrl\":\"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg\",\"caption\":\"OTAVA\u00ae\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263\",\"name\":\"Irma Brillantes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"caption\":\"Irma Brillantes\"},\"url\":\"https:\/\/www.otava.com\/blog\/author\/ibrillantesotava-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker | OTAVA","description":"Here's how disaster recovery and offsite backup can help mitigate the potentially devastating losses from Cryptolocker ransomware.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/","og_locale":"en_US","og_type":"article","og_title":"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker","og_description":"Here's how disaster recovery and offsite backup can help mitigate the potentially devastating losses from Cryptolocker ransomware.","og_url":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/","og_site_name":"OTAVA","article_published_time":"2013-11-05T00:00:00+00:00","og_image":[{"url":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg","type":"","width":"","height":""}],"author":"Irma Brillantes","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Irma Brillantes","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#article","isPartOf":{"@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/"},"author":{"name":"Irma Brillantes","@id":"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263"},"headline":"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker","datePublished":"2013-11-05T00:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/"},"wordCount":593,"commentCount":0,"publisher":{"@id":"https:\/\/www.otava.com\/#organization"},"image":{"@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#primaryimage"},"thumbnailUrl":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/","url":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/","name":"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker | OTAVA","isPartOf":{"@id":"https:\/\/www.otava.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#primaryimage"},"image":{"@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#primaryimage"},"thumbnailUrl":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg","datePublished":"2013-11-05T00:00:00+00:00","description":"Here's how disaster recovery and offsite backup can help mitigate the potentially devastating losses from Cryptolocker ransomware.","breadcrumb":{"@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#primaryimage","url":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg","contentUrl":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/ScreenShot1.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.otava.com\/blog\/offsite-backup-thwarting-the-profitable-encryption-malware-cryptolocker\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.otava.com\/"},{"@type":"ListItem","position":2,"name":"Offsite Backup: Thwarting the Profitable Encryption Malware Cryptolocker"}]},{"@type":"WebSite","@id":"https:\/\/www.otava.com\/#website","url":"https:\/\/www.otava.com\/","name":"OTAVA\u00ae","description":"","publisher":{"@id":"https:\/\/www.otava.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.otava.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.otava.com\/#organization","name":"OTAVA\u00ae","url":"https:\/\/www.otava.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.otava.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg","contentUrl":"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg","caption":"OTAVA\u00ae"},"image":{"@id":"https:\/\/www.otava.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263","name":"Irma Brillantes","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","caption":"Irma Brillantes"},"url":"https:\/\/www.otava.com\/blog\/author\/ibrillantesotava-com\/"}]}},"_links":{"self":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts\/2708","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/comments?post=2708"}],"version-history":[{"count":0,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts\/2708\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/media?parent=2708"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/categories?post=2708"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/tags?post=2708"},{"taxonomy":"other_category","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/other_category?post=2708"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}