Time Machine protects from ransomware?
I read that versioning of backups are the best way to get out of trouble with ransomware, and that Time Machine does just that.
Any advice?
iMac, OS X El Capitan (10.11.1), 16GB RAM, late 2011
I read that versioning of backups are the best way to get out of trouble with ransomware, and that Time Machine does just that.
Any advice?
iMac, OS X El Capitan (10.11.1), 16GB RAM, late 2011
Time Machine will not prevent ransomware, malware or adware. These all will be backed along with your TM backups. However if you choose to revert from a Time Machine backup previous to the malware attack it will be helpful.
As Tesserax says, scan with Malwarebytes to detect and remove malware.
Sorry, in I meant that Apple apparently recommended Malwarebytes, but that's hearsay online (as well as them conflicting). On macOS right now Malwarebytes is only user activated, not running in the background, although a simple Applescript could change that and I have it set to scan whenever I log in (which, admittedly isn't very often).
When I performed a scan just now I found a false positive with an Apple Extension for Safari (from the Apple website) known as "Awesome Screenshot" (https://safari-extensions.apple.com/details/?id=com.diigo.safari.awesomescreensh ot-5DXNM3K2CT) and have reported it to Malwarebytes.
I am looking into maybe flashing my router with Tomato or WRT (likely Tomato if a) my router is supported and b) because I'm a Mac user and GUI is important) as a buffer against other issues, what with backdoors and such being more of an issue in routers from the factory, I think it wise.
Having recent "clean" backups of your computer, especially cloned copies of the Mac's internal hard drive is one way to recover from a ransomware infection. Time Machine backups would be part of that strategy ... but not the cloning part. That would require a different application, like Carbon Copy Cloner or SuperDuper!
I do, monthly, copy my (encrypted) TimeMachine backup to another HDD via CCC, but that's only monthly, as anything more is unrealistic for me.
These latest crypto-ware lay dormant for days anyway, so a month is likely enough time to look back and picket out, or avoid it, for now? I do have the space for a full thirty days backup.
Any other advice, aside from expensive subscription cloud services?
I just did an Internet search on "How to avoid ransomware on Macs" and got dozens of articles that can be reviewed. Note: I would avoid those that are basically ads and review those from trusted sources.
You do not need an anti-virus program for your iMac, but I would suggest that you download and use Malwarebytes often to root out any potential infections.
Thanks for the info, I am actively seeking out multiple references, of course the official forums for Apple products is always a reliable place. I mostly wanted to understand "versioning" as I believed at first that I would need a particular RAID configuration, but to learn that Time Machine did it already was encouraging.
I rely on Sophos in the background right now, I'll take a look at Malwarebytes to see what they offer in addition, but am acutely aware of phishing tactics, of course Time Machine being a save-my-backside option, but one I needed to initially better understand.
Thanks for the pointers guys.
Don't rely on Sophos. I would recommend uninstalling it. Anti-virus apps are renowned for identifying false positives and causing problems with Macs. They also will cause your Mac to take a hit on performance.
The only thing you can rely for Sophos is false positives when it is not causing conflicts with OS X. 3rd party Mac AV products have so far been proven to be ineffective with detecting Malware and Adware on Mac and never actually faced an actual Mac Virus so their reaction to one if it came into existence has never been documented.
If you are using Sophos to protect PC's on your network use a Windows AV product on the Windows device to do that so you are not causing potential and often serious issues.
3rd party Mac AV products have been documented on these forums as points of conflict with OS X/Mac OS's ability to manage itself through the securities updates Apple provides.
Updates to your OS and securities patches from Apple are the single best software defense on Apple Computers at this time.
Anti-virus and malware scanners do different things. I've had Sophos running on my old machine for around a year and a half or more and not had many false-positives at all. However, both Malwarebytes and Sophos apparently don't run well on the same system together, so I'm going to have to choose one and as malware is more deadly these days (and more proliferate on macOS) I'm inclined to make a switch.
Apparently Apple does "recommend" it, but I've not found any official documentation online supporting this, so it could just be verbal fro their stores? I know that Apple do use a 3rd party de-fragmenter, but I use SSD now.
If I was worried about false positives I'd stay away from Little Snitch, which is one BIG easily-triggered pop-up **** of an app, but understand that a firewall other than Apple's official offering would be a smart move.
Actually even the firewall is unnecessary if you are behind a router. Also, Mac's own built-in security features protect your Mac very well. I wasn't aware that Apple recommend Sophos. It would be nice to see some documentation, or did a rep in an Apple Store suggest that? I can see them suggesting it, if you were also running Windows. Of course, if you just look in the AppStore, they're selling all sorts of stuff that wouldn't be any good for your Mac.
I don't use either MBAM or Sophos but if you would reference where/how you've discovered that they conflict so that I may share the info, I'd appreciate it. If you can't, no worries.
Sophos has active "protection" whereas MBAM is only an on-demand scanner (at least for now). Are they detecting each other's signatures?
Sophos has active "protection" whereas MBAM is only an on-demand scanner (at least for now). Are they detecting each other's signatures?
MBAM only finds and removes Adware. It does no active scanning, which is not needed on a Mac. If you let yourself be tricked into installing Adware, MBAM usually can remove it. Unless Sophos installs Adware (certainly possible from my point of view), then MBAM would likely detect it.
As far as I know, there is no AV package that will detect and prevent you from installing Adware, though I know some Adware is detected and removed by Protect (or some other part of the OS).
While MacOS's built in Time Machine does not protect against this third party software such as Bitdefender Anti-malware does however prevent modifications to TM backups and allows you to set it so that it scans it for malware.
Thank you for the clarification.
Time Machine protects from ransomware?