Undoing a Ransomware infection
summary
Real-time file‑system hooks and sync hooks fail because analysis lacks time to distinguish benign edits from ransomware (failed real-time detection), so a backup/cloud approach wins: Nextcloud versioning and trashbin provide the metadata needed. A Nextcloud app named Ransomware Detection monitors sync activity, color‑codes suspicious syncs, and implements a one‑click two‑way rollback using file versions so infected files can be restored after an attack; future work adds a full file scan for automated recovery.
AI-written summary · about
related talks
20mWhen ransomware strikes
14mIs a Ransomware Attack in your Future? How to Prevent an Attack
38mRansomware and Backups: A Multi-Layered Defense Strategy
51mHow to secure your data and applications against ransomware
15mRansom Access Memories: Achieving Practical Ransomware Protection in Cloud with DeftPunk
21mRansomware Attack: Lessons Learned
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
18mSecuring S3 Backups Against Ransomware