Protecting by ransomware with a disk image

Hi,

also if i've red that is not so easy to be infected by a ransomware, if you are cautious, i'm wondering if it could be a good solution to save an image of the Mac HD on my NAS. If yes, which is the best backup app for Mac that automatically save an incremental image of my HD?

Thanks in advance for every suggestions

MacBook Air, macOS High Sierra (10.13.2)

Posted on Dec 18, 2017 5:58 AM

Reply
Question marked as Top-ranking reply

Posted on Dec 18, 2017 6:02 AM

if you are concerned you should keep a copy of your data on Time Machine. In the event of any type of system compromise you can restore your OS in recovery mode, then use migration assistant to restore the data from Time Machine. Since the components of the OS are being restored from Apple this is going to be a clean instance. Even if your NAS or a clone of the drive was compromised somehow you have removed that possibility inside your own network.


How to use Time Machine to back up or restore your Mac - Apple Support


About macOS Recovery - Apple Support


How to move your content to a new Mac - Apple Support

4 replies
Question marked as Top-ranking reply

Dec 18, 2017 6:02 AM in response to albesse

if you are concerned you should keep a copy of your data on Time Machine. In the event of any type of system compromise you can restore your OS in recovery mode, then use migration assistant to restore the data from Time Machine. Since the components of the OS are being restored from Apple this is going to be a clean instance. Even if your NAS or a clone of the drive was compromised somehow you have removed that possibility inside your own network.


How to use Time Machine to back up or restore your Mac - Apple Support


About macOS Recovery - Apple Support


How to move your content to a new Mac - Apple Support

Dec 18, 2017 1:29 PM in response to albesse

At this time there are not OS X virus in the wild so the potential to what one could do would be determined by their existence in the wild. It also depends greatly on your scope of "ransomware"


If your system had some type of ransomeware compromise on the OS level then any backup you are making after that compromise is being replicated in some form so you are copying an already compromised local system.


If someone got hold of your Apple ID credentials (see next paragraph) and locked you out of your computer then the backup wont matter, you need to secure your ID.


If you share the same or similar log/pass combo with another service and that service is compromised then anyone with that information simply needs to try the same combo elsewhere and enable two factor authentication if you have not done so already. Yahoo, Twitter, Facebook, etc. have an astronomically larger user bases so they are inherent targets of account hacks. I don't know of an instance where Apple has had their account service hacked, outside of users clicking on phony links and providing their credentials to a site masquerading as iCloud or some "Apple" service page that is completely fraudulent. If you are concerned and you are not protecting your account then thats a mistake.


And if you are running some form of AV on your mac you are likely causing problem and not protecting against anything.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Protecting by ransomware with a disk image

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.