Re: VTL attacks

[Holger Scherer <hs@xxxxxxx>]

I am not sure what the vendors will tell us, but usually
a VTL only should have two types of connection:

* FibreChannel for connecting the hosts to be backed up
* AdminLAN Ethernet for administrative things (which should be secured)

A ransomware attack on FibreChannel from the hosts might be possible if the hosts
belong to the vulnerable group of systems, but the only vector can be a malicious use
of the backup software). On AdminLAN, not even a normal PC should be able
to connect to the VTL.

And i hope noone has a VTL running on Windows where the VTL data
is accessible via SMB?

I never heard of a VTL being attacked by ransomware, but depending on the architecture,
there might be some vulnerable devices.

-h



> Am 25.03.2021 um 15:33 schrieb Rob Berendt <rob@xxxxxxxxx>:
>
> Does anyone know of any VTL's attacked by ransomware?  I'm currently using EMC Data Domain 2500's and I do not know of any.