Maze Ransomware ... 'nuff said. Thank goodness for site-to-site replication.
Joe On Fri, Sep 4, 2020 at 3:40 PM Jesse 1 Robinson <[email protected]> wrote: > Joe, am I reading that this situation actually happened to your VTL > customer??? > > . > . > J.O.Skip Robinson > Southern California Edison Company > Electric Dragon Team Paddler > SHARE MVS Program Co-Manager > 323-715-0595 Mobile > 626-543-6132 Office ⇐=== NEW > [email protected] > > -----Original Message----- > From: IBM Mainframe Discussion List <[email protected]> On Behalf > Of Joe Monk > Sent: Friday, September 4, 2020 12:10 PM > To: [email protected] > Subject: (External):Re: Ransoming a mainframe disk farm > > CAUTION EXTERNAL EMAIL > > Skip, > > I will tell you what saved one of my customers. When they use a VTL, they > replicated that VTL to another site. So, when some files got encrypted via > ransomware, they were able to quickly replicate the files back and re-boot. > > Joe > > On Fri, Sep 4, 2020 at 1:51 PM Jesse 1 Robinson <[email protected]> > wrote: > > > It’s Friday, so don’t rag on me for venturing into IT fiction. No one > > has hit us with this challenge (yet), but it could happen. > > > > Ransomware is much in the news these days. As unlikely as it might be, > > some nefarious genius manages to lock you out of your entire disk farm > > and demands rubies and bitcoin to remove the lock. Meanwhile your shop > > is out of the water. You have everything meticulously mirrored to > > another site, but as with any good mirror, the lock has been reflected > > in your recovery site. > > > > The classic mainframe response--short of forking over the > > ransom--would be to IPL a standalone DSS restore tape, then locate and > > mount standard offload backup tapes. Restore enough key volumes to IPL > > a minimal system, then proceed to restore (all) other volumes. It will > > take a while, but it will work. Eventually. > > > > Now consider a smartly modern shop that has taken the advice of a > > generation of hired gurus and eliminated 'real tape' altogether. No > > more physical tapes. No more physical tape drives. > > > > What would be your sage advice? > > > > . > > . > > J.O.Skip Robinson > > Southern California Edison Company > > Electric Dragon Team Paddler > > SHARE MVS Program Co-Manager > > 323-715-0595 Mobile > > 626-543-6132 Office ⇐=== NEW > > [email protected] > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
