Ransomware Attack - File Encryption

Hi Hari

Yes, encrypted files can be re-encrypted by a ransomware attack. The encryption process does not care if a file is encrypted. 

Anubis

Thanks Anubis

Do you have any document for regarding the same.

Regards

Hari

Hi Hari

I am going through our documentation to see if I am able to find an article that I can provide to you.

This may take a bit of time for me to locate it if we do indeed have one.

I will post it in a reply to you if I am able to locate it.

Thank you Anubis

Regards

Hari

Hi - Sophos does have products that can prevent encrypting malware, but SafeGuard is not one of them!

The Malware would encrypt all files (sometimes targeted file types) but them being encrypted (or the disk being encrypted) already would sadly make no difference to the software.

You would just have them "double" encrypted! 

There are other products on the market from other suppliers - but Sophos Intercept X is the current product that can help mitigate this.

www.sophos.com/.../intercept-x.aspx