Hypothetical - WannaCry > Sharepoint?

[glenimp617]

Hi Everyone,

Let's say that a company got hit by a new virus (wannacryv2) and all users had a mapped network drive to a company sharepoint site.

In theory, would the data in sharepoint be encrypted by the virus? or would Microsofts servers stop it

Thanks

 

[Emlyn_Dewar]

In the MS webinar they did immediately afterwards, the guy had said that any mapped drives could be compromised, including Sharepoint.

I guess it could be restored I suppose, but it would be a nightmare.

 

[glenimp617]

Thanks, that's very helpful

 

[nightmare99]

If its Office 365 I believe you have to request they restore the whole site collection and not individual Files and/or doc libraries.

 

[glenimp617]

If its Office 365 I believe you have to request they restore the whole site collection and not individual Files and/or doc libraries.

Don't suppose you have a link saying that, just doing a BCP for work and this could be quite critical for us. Thanks.

 

[teaboy5]

In the MS webinar they did immediately afterwards, the guy had said that any mapped drives could be compromised, including Sharepoint.

I guess it could be restored I suppose, but it would be a nightmare.

Got a link?

 

[Emlyn_Dewar]

Will have a rake. They did it over Skype for Business, but it was definitely recorded for later.

Edit: This was the one. It was almost amusing but ultimately soul destroying to hear the guy's faith in humanity be slowly eroded by ridiculous questions.

 

[nightmare99]

Don't suppose you have a link saying that, just doing a BCP for work and this could be quite critical for us. Thanks.

The only ones I can find at the moment are these but I'm sure there is a more up to date page abut somewhere

https://www.itunity.com/article/limitations-sharepoint-online-backup-restore-3550
https://blogs.technet.microsoft.com/akieft/2012/01/09/restore-options-in-sharepoint-online/

 

[glenimp617]

Thanks guys

 

[Deleted member 77746]

A reason to get rid of shared drives. For security sake.

 

[glenimp617]

A reason to get rid of shared drives. For security sake.

What about the pointer for onedrive found in explorer? Technically it acts as a folder within the users profile c:\users\username\onedrive. Assume that a virus would look in the profile as well, infecting onedrive and syncing back to the cloud?

 

[nightmare99]

What about the pointer for onedrive found in explorer? Technically it acts as a folder within the users profile c:\users\username\onedrive. Assume that a virus would look in the profile as well, infecting onedrive and syncing back to the cloud?

Try to avoid file sync to local workstations where possible.

 

[York]

Having had to do this for 200tb of data; yes it can encrypt and yes its a very complicated support call with MS when you have to roll back 100k+ site collections.

 

[Liquidfox]

What about the pointer for onedrive found in explorer? Technically it acts as a folder within the users profile c:\users\username\onedrive. Assume that a virus would look in the profile as well, infecting onedrive and syncing back to the cloud?

Yes viruses do infect stuff like that, we had a client who got hit a while back who had their entire DropBox sync encrypted. They had to use the previous versions function on the web portal. We had advised against syncing personal data on work's machines several times prior so it was on their head. They weren't best pleased when they were told that we were happy to sort it out for them at their usual hourly rate

 

[xxalxx]

Will have a rake. They did it over Skype for Business, but it was definitely recorded for later.
Edit: This was the one. It was almost amusing but ultimately soul destroying to hear the guy's faith in humanity be slowly eroded by ridiculous questions.

The presenter on that webinar was brilliant and you could easily see him banging his head on his desk at the questions.