After news broke this weekend on a global ransomware attack, we’ve been receiving many questions from our users about how Tresorit can protect files against attacks like WannaCry.
Although backup in the cloud can help in several cases, unfortunately, cloud storage services alone do not provide a silver bullet solution against ransomware.
Does a backup with Tresorit protect me from ransomware?
Tresorit is not an antivirus software, so it doesn’t protect you from the attack itself. We recommend using antivirus software and most importantly, suggest you regularly update all your OSes and applications.
However, in some cases, it can help you with damage control and get back your original files. There are different types of ransomware:
- one type of them encrypts the files without deleting them first,
- while a different type deletes the files first and then encrypts them.
I still have access to the files, but they are encrypted.
If a ransomware does not delete the files first, then you can easily recover the files with Tresorit using our file versioning feature.
- Select the file you wish to recover.
- Right click on the file
- Select “See Versions” and click on “Download”
I cannot see the versions in Tresorit file versions.
That means that the ransomware you fell victim of deleted the files. That's a more delicate situation. Tresorit can only help you recover the files in the following 2 cases:
- if your tresor(s) (that included the files) was shared with someone who synced your tresor,
- or if you have accessed and synced the tresor(s) on another machine.
Please note that file versioning is only available for Premium, Solo, Business and Enterprise Tresorit customers.
How can I access deleted files with Tresorit?
- First, identify a computer, which is not affected by the ransomware.
- Find a hidden .tresorit folder which contains a "Trash" with all the remotely deleted files (<Tresor name>\.tresorit\Trash). Learn more about this workaround and get a step-by-step guide in this article.
- As the ransomware affected the files on another computer, you will find the uninfected files there.
The Users that belong to the same Business Account cannot infect each other. In case you are a victim of a ransomware, only your files are impacted. However, if you use synced tresors within a team, the files in these synced tresors will be encrypted on all computers and for all users who access the tresor.
How about an easier file recovery feature?
We’re working on the file recovery feature that will help you access and recover your deleted files in an easy way instead of the current workaround.
If the end-to-end encrypted cloud is not a solution in itself, what should I do to avoid ransomware?
We recommend using antivirus software and most importantly, suggest you regularly update all your OSes and applications.
If I’m a victim of WannaCry, what are the options?
At this point, we are not familiar with any solutions that would help to decrypt files that were attacked by WannaCry. However, as WannaCry’s deletion is not working well, you can try to restore the files with file recovery software services. Learn more about WannaCry here.