Ransomware on the managed hosting platform
RSK-001
-
Last updated
Treating
Description
A ransomware infection that reaches the hosting platform would encrypt the virtual machines of many customers at the same time. The platform team manages the clusters in both data centre suites from one management network, which is the path an attacker would use.
Measures
Veeam copies go every night to the Harbourlight offsite storage, and the platform team restores a sample from there every six months. Endpoint detection runs on all management servers, and the management network is kept apart from the customer networks.