We have just found out that Shadow Protect backups that are not backed up to the cloud are now vulnerable to Crypto Locker Ransomware. In the past Crypto Locker Ransomware has not encrypted Shadow Protect backups on USB external hard drives. So any company that backed up to external USB hard drives has until now been safe from this ransomware.
All those using our cloud backup are not affected by this change as the cloud server will not allow any backups to be changed for 10 days allowing us enough time to recover.
For those continuing to use USB hard drives to back up, the best defense is to swap backup drives DAILY and to have at least 5 backup drives. In this case the worst you can lose is 1-2 days of work.
As always the best cure is to not get infected in the first place. Please be vigilant of scam emails and calls, don’t open any attachments in emails or click on any links unless you are 100% sure of what they are. Even if the email comes from someone you know.