Recovering from OneDrive for Business ransomware attacks

[sanjida708]

Ransomware has been a growing threat in recent years, with experts now estimating the cost of these attacks at $7.5 billion in the U.S. alone in 2019. Affected institutions include 966 government agencies, educational institutions, and healthcare providers. Since most ransomware attacks are the result of a minor mistake made by an end user, whether through phishing emails or stolen credentials, the threat is expected to increase in the coming years.

With this in mind, organizations must take concrete steps to defend themselves against ransomware. The best way to do this is to take preventative measures and deploy a robust croatia phone number data backup solution . Having backups from which you can restore your data allows you to recover from an attack if your preventative systems fail.

How does ransomware affect cloud storage like OneDrive for Business?
Ransomware attacks aren’t just a threat to your physical workstations, they can also affect files stored on your OneDrive for Business sites. With Microsoft’s OneDrive Sync Client, you can sync your OneDrive data from the cloud to your desktop and vice versa. If a ransomware attack on your system infects the files in your synced copy of OneDrive for Business, the data will be synced back to the cloud and all data in your OneDrive for Business environment will also be infected.

Microsoft provides a way to recover from instances like this, but it has some limitations , including:

File Restore uses version history and the Recycle Bin to restore OneDrive, so it's subject to the same restrictions as those features. When version history is turned off, File Restore can't restore files to a previous version.
Deleted files cannot be restored after they are removed from the site collection Recycle Bin – whether they were manually deleted or the Recycle Bin was emptied.
Albums are not restored.
If you upload a file or folder again after deleting it, File Restore will skip the restore operation for that file or folder.
How to recover files with Manage Engine's RecoveryManager Plus?
ManageEngine RecoveryManager Plus backs up all changes made to OneDrive for Business files and folders daily and allows you to restore all your OneDrive for Business data to any previous state in two simple steps .

Before restoring data from a backup, clean your system of all traces of ransomware.

1. Open the backup corresponding to the OneDrive for Business site that needs to be restored.

select-backup
2. Select the date and time you want to revert to and click Restore Site.

restore-the-files
And that’s it! All your files and folders will be restored to OneDrive for Business without any trace of files being corrupted and encrypted.