[Samba] Ransomware?

ToddAndMargo ToddAndMargo at zoho.com
Thu May 19 17:50:56 UTC 2016


On 05/17/2016 01:54 AM, Reindl Harald wrote:
>
>
> Am 17.05.2016 um 03:13 schrieb ToddAndMargo:
>> On 05/15/2016 01:00 PM, Andrew Bartlett wrote:
>>> On Sat, 2016-05-14 at 22:42 -0700, ToddAndMargo wrote:
>>>> Hi All,
>>>>
>>>> Is there anything in Samba that will help protect
>>>> against ransomware?
>>>
>>> I've not had to look into this properly, but I would suggest that
>>> regular and genuinely offline backups and regular Read Only snapshots.
>>>
>>
>> On linux, I do xfsdump's and rotate several full backups.  I
>> also leave the drives unmounted when not in use.  Ransomware
>> is only dangerous where they can find a drive letter
>
> that is simply not true
>
> months ago there where ransomware which discovered shares without a
> drive letter assigend

yes, I just read Fabians post.  Oh on!
Is it only CIFS drive shares it goes after?





More information about the samba mailing list