Mythbusting: I have backups, so what could possibly go wrong?!!
Let’s examine a common myth about backups.
Backup copies can definitely save the day, when something goes wrong. But if attackers get access to the storage system, they can easily wipe out those snapshots and backups. In fact, the same admin credentials that were used to access the production servers can also be used to get to the replicas.
As you probably already guessed, this means that attackers can also delete the replicas – just as soon as they finish with the production storage.
Even immutable storage can be ‘poisoned’, enabling attackers to change the configuration of backup clients, and gradually replace stored data with junk data.
Beware of this common myth.