re: Colonial Pipeline gave in: $5,000,000 paid to ransomware hackers

quote:

---

It’s cheaper to pay the ransom than rebuild and reconfigure IT infrastructure.

---

Not in the long run. Essential industries like this need to invest in better backup infrastructure and have more redundant systems. Most likely the attackers still have unequivocal access to Colonial Pipeline's network and planted numerous backdoors.

This can be easily prevented by having VM backups replicated to an off site server room with extra VM snapshots stored on off site encrypted SAN storage arrays.