Offsite Backup & Replication with Veeam Cloud Connect as a Service

Netwalker (Mailto) emerged in 2019 and evolved into a stealthy, RaaS-driven threat targeting healthcare, education, and government. It often uses phishing and exposed RDP, runs filelessly in memory, steals data before encryption, and pressures victims with double extortion.

GandCrab reshaped ransomware with a scalable RaaS affiliate model, rapid version updates, and hard-to-trace crypto demands. Even after its 2019 shutdown, its techniques live on in successor strains—making segmentation, EDR, and immutable, air-gapped backups essential.

TeslaCrypt emerged in 2015, first targeting gamers before expanding to business documents, backups, and network drives. Though shut down in 2016 with a public decryptor, its encryption and delivery tactics influenced later ransomware families and still inform modern prevention and recovery planning.

Jigsaw ransomware combines encryption with timed file deletion to force rapid payment decisions. This guide explains how it infects systems, maintains persistence, targets shared storage, and why fast isolation plus immutable, offline backups and layered defenses are essential for prevention and recovery.

Dharma ransomware remains a persistent enterprise threat, using strong encryption and a Ransomware-as-a-Service model to disrupt operations worldwide. This guide explains how Dharma attacks networks, why decryption is unlikely, and what organizations must prioritize for effective prevention, response, and recovery.