A ransomware attack infects a computer or device, gaining administrative privileges and encrypting all your files. The attacker will normally leave a note demanding a ransom in return for unencrypting your files. Ransomware has similar attack vectors to other malware, including email phishing scams or targeted exploitation of personnel or security vulnerabilities.

While nothing can prevent a ransomware attack, there are steps you can take to mitigate damage and downtime including:

• Keeping your operating system and technology stack up-to-date to stay ahead of known exploits and vulnerabilities
• Cybersecurity investments (e.g., InfoSec training, network security audits, and vulnerability testing)
• Controlling access to secure files and data through admin rights and privilege management
• Backing up files through frequent snapshots and other data-protection methods

Pure SafeMode enables organisations to lock down data from malicious attacks. SafeMode creates read-only snapshots of backup data and associated metadata catalogues. SafeMode-secured snapshots cannot be deleted, encrypted, or modified even if admin credentials are compromised. SafeMode is available on FlashArray and FlashBlade systems.