{"id":29748,"date":"2026-10-14T01:00:35","date_gmt":"2026-10-13T17:00:35","guid":{"rendered":"https:\/\/bigband.net.my\/?p=29748"},"modified":"2026-10-13T11:34:08","modified_gmt":"2026-10-13T03:34:08","slug":"ransomware-backup-last-line-of-defence-malaysia-2026","status":"publish","type":"post","link":"https:\/\/bigband.net.my\/index.php\/2026\/10\/14\/ransomware-backup-last-line-of-defence-malaysia-2026\/","title":{"rendered":"Ransomware Doesn\u2019t Knock: Backup as Your Last Line of Defence | BigBand"},"content":{"rendered":"\n[et_pb_section fb_built=”1″ _builder_version=”4.27.6″ _module_preset=”default” custom_padding=”0px||||false|false” global_colors_info=”{}”][et_pb_row _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.9″ _module_preset=”default” text_font_size=”18px” header_text_color=”#0060ae” header_font_size=”52px” header_2_font=”|700|||||||” header_2_text_color=”#58595b” custom_margin=”0px|0px|0px|0px|false|false” custom_margin_last_edited=”off|desktop” hover_enabled=”0″ text_font_size_tablet=”18px” text_font_size_phone=”18px” text_font_size_last_edited=”on|phone” header_font_size_tablet=”52px” header_2_font_size_tablet=”” header_2_font_size_phone=”” header_2_font_size_last_edited=”on|desktop” global_colors_info=”{}” sticky_enabled=”0″]

Ransomware Doesn\u2019t Knock<\/span><\/b><\/h1>\n
\n

It arrives silently, encrypts everything at once, and goes for your backups first. The one copy it cannot reach is the thing that lets you say no.<\/span><\/i><\/h2>\n<\/div>\n

                 <\/h2>\n
\n

On 20 June 2024, ransomware known as Brain Cipher tore through Indonesia\u2019s national data centre. Immigration counters, airport systems and services across more than two hundred government agencies seized up at once. The attackers demanded about 8 million US dollars. The government refused to pay, which was the right call, and then came the detail that turned a crisis into a catastrophe: officials admitted that 98 percent of the data in one of the compromised centres had no backup at all. Backup capacity had been available, but optional, and most agencies had skipped it to save money. Without a clean copy to restore from, refusing the ransom meant the data was simply gone.<\/p>\n

That is the whole lesson of ransomware in one event. It does not knock. It does not negotiate at the front door. It slips in quietly, often sitting undetected for days or weeks, the median across investigations is around two weeks, while it maps your network and finds what matters. Then, at a moment of its choosing, it encrypts everything at once. There is no warning and no gradual failure you could have caught. The first most businesses know of it is a ransom note on every screen.<\/p>\n

And it is cleverer than most owners expect, because it hunts the one thing that would save you. Backups are your escape route, so attackers go for them first. Sophos found that in 94 percent of ransomware attacks the criminals tried to compromise the victim\u2019s backups, and when they succeeded the recovery bill ran roughly eight times higher. A backup sitting on the same network, the same server, or the same building as your live systems is not a safety net against ransomware. It is just more data for the attacker to lock in the same stroke.<\/p>\n

This is why a backup only counts as a last line of defence if the ransomware cannot reach it. That means a copy kept offline or immutable, which simply means it cannot be changed or deleted once written, held somewhere separate from your day to day systems. Get that one thing right and the entire balance of power shifts. The attacker\u2019s threat is \u201cpay us or lose everything.\u201d A clean, untouchable backup lets you answer: we will restore, and we will not pay. That single sentence is the difference between a bad week and a closed business.<\/p>\n

None of this is distant. Ransomware against Malaysian businesses rose 42 percent in 2025, and SMEs are singled out precisely because their backup habits are inconsistent, the same weakness that sank the data centre next door in Indonesia. BigBand keeps a clean, encrypted copy of your data in its Tier III Cyberjaya facility, offline and separated from your premises so ransomware cannot encrypt it, then pairs it with managed recovery so a Malaysian team can actually bring you back. Twenty years of doing this locally is what stands behind the promise that, on the worst day, you will still have something to restore from<\/span>.<\/p>\n<\/div>\n

<\/span>                 <\/p>\n

\n

\u201cRansomware hunts your backups first, because the backup it cannot reach is the one thing that lets you refuse to pay.<\/em><\/strong>\u201d<\/em><\/strong> <\/span><\/h3>\n

BigBand Advisory<\/span><\/p>\n<\/blockquote>\n

\n
               <\/div>\n
\n

Three questions that decide whether your backup survives an attack<\/strong><\/p>\n