--- title: "GUEST BLOG: Architecting a Layered Security Approach in the ‘Year of the Hacker’" description: Ransomware is clearly a profitable line of work. Not surprisingly, its reach is growing, and 2017 is now being coined the year of the hacker. canonical_url: https://www.acronis.com/en/blog/posts/guest-blog-architecting-layered-security-approach-year-hacker/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # GUEST BLOG: Architecting a Layered Security Approach in the ‘Year of the Hacker’ Given the volume of record-breaking and prominently reported breaches, it’s not surprising that 2016 was dubbed the year of the hack. Whether it was news of Yahoo’s two record-breaking hacks, state-sponsored hacking, or Dropbox and social networks being breached, hardly a week went by without news of a major security breach. Ransomware is clearly a profitable line of work. Not surprisingly, its reach is growing, and 2017 is now being coined the year of the hacker. [Learn More](https://www.acronis.com/en/products/cyber-protect/) [![Image 2: Tracy Hernandez](https://staticfiles.acronis.com/images/content/4ebd2c6ab90855a20d45286557169382.png)](https://www.acronis.com/en/blog/authors/tracy-hernandez/ "Tracy Hernandez") [Tracy Hernandez](https://www.acronis.com/en/blog/authors/tracy-hernandez/) 3 min read Last updated 29 August 2017 _This is a guest blog from Kaseya._ Given the volume of record-breaking and prominently reported breaches, it’s not surprising that 2016 was dubbed the year of the hack. Whether it was news of Yahoo’s two record-breaking hacks (which actually took place in 2013 and 2014), state-sponsored hacking, or Dropbox and social networks being breached, hardly a week went by without news of a major security breach. Costly breaches and malware are nothing new, and company breaches have been on the rise for a decade. But the billions of records breached in 2016 set a new benchmark. Among the most costly and nefarious attacks was ransomware. Ransomware, which has been wreaking havoc for years, locks up and decrypts data, releasing it only after money is paid, usually through Bitcoin. Ransomware payments took off for 2016. Estimated at close to $1 billion, according to the FBI, they saw a significant jump over the $24 million paid out in 2015. Ransomware is clearly a profitable line of work. Not surprisingly, its reach is growing, and 2017 is now being coined the year of the hacker. Consider [Petya](https://www.acronis.com/en-us/blog/posts/ransomware-attack-wasnt), a recent ransomware attack based on the [WannaCry](https://www.acronis.com/en-us/blog/posts/wannacry-ransomware-attack-what-you-need-know) attack, which goes after a hole in older versions of Windows. Petya takes WannaCry a few steps further than the original malware though. iPetya, for example, knows how to mine endpoints for passwords and uses these credentials to spread to other devices. Petya can also be spread by taking advantage of machines with admin rights, similar to an elevation-of-privilege attack. Initial Petya victims included banks, airports, the metro in Kiev, and even the Chernobyl radiation detectors. In the months since the hack, Petya’s costs have been are staggering, impacting companies worldwide. And yet, Petya could have easily been prevented. Like any successful malware, new ransomware variants are based on the old ones, making it a snap for even amateur-hour hackers to tweak an old exploit and unleash it as new. WannaCry, the basis for Petya, was used by the U.S. National Security Agency (NSA) for its own cyber-efforts — which a WikiLeaks data dump disclosed — offering hackers an easy-to-follow blueprint. Fortunately, with the right strategy ransomware can be stopped in its tracks before it enters your organization. Smart end users and IT shops patch their systems, and in fact, Microsoft has a patch that plugs this hole. Unfortunately, all too many organizations fail to patch regularly and completely, and thus you also need a strategy to thwart the impact of ransomware. ## 3 steps to avoiding the pain of a ransomware attack Ransomware is serious stuff, but its most pernicious effects are easily avoided if you take three basic steps to protect your operation. The key? A layered security approach. Taking these steps will go a long way toward protecting your organization. 1. **Patch your computers.** Patching is 100 percent essential, but it is not easy for organizations that rely on end-user vigilance or manual IT means. You need an automated patching solution so patches are installed when they become available – on all endpoints and servers. 2. **Maintain an antivirus and anti-malware solution.**With proper security protection across all your systems, incursions such as WannaCry will be spotted, blocked, and purged. Like patching, an automated solution that installs and updates security across all of your systems is essential. 3. **Be Smart about backup.** Ransomware works by holding your data hostage. For those with no backup, an encrypted and locked hard drive is a disaster. If you have a current backup, it is only a nuisance. The best solution is an automated tool that backs up all of your systems to the cloud, where it remains safe until you need that data back. The reality is most successful exploits are against unpatched systems. Hackers love to take shortcuts and the patching process offers a perfect opportunity, just like the NSA leak offered an architectural blueprint for how to exploit the Windows’ hole that Petya jumps through. ## Kaseya Cloud Backup, powered by Acronis, helps prevent data loss Recently, Kaseya introduced **[Kaseya Cloud Backup, powered by Acronis](http://www.kaseya.com/products/vsa/cloud-backup)**, an ideal solution for SMBs and managed service providers alike. With Kaseya Cloud Backup, you can back up and recover every machine you manage on-premises or in the cloud from a single pane of glass. Kaseya Cloud Backup can automatically and regularly copy your files so the most recent version is resting comfortably in the cloud, making restoration a snap. By leveraging the power of VSA by Kaseya (which includes automated patch management and antivirus/anti-malware) with Kaseya Cloud Backup, you can quickly define backup policies by organization, machine group, or device type. Create as many policies as you need to simplify managing the backup requirements of the entire set of infrastructures under your control, and ensure you are meeting all compliance procedures. Changes in standard policy procedures can be applied to multiple machines and environments with a few simple clicks. In addition, you can create policies in VSA to restart failed backups automatically, shut down machines prior to backing up, and resolve many other problems that commonly occur during routine backup processes. [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) ## Written by ![Image 3: Tracy Hernandez](https://staticfiles.acronis.com/images/content/4ebd2c6ab90855a20d45286557169382.png) Tracy Hernandez [Previous post](https://www.acronis.com/en/blog/posts/safety-first-business-and-f1-keeping-safe-and-well-protected-number-one-priority/) [Safety First: In Business and in F1, Keeping Safe and Well Protected Is the Number One Priority](https://www.acronis.com/en/blog/posts/safety-first-business-and-f1-keeping-safe-and-well-protected-number-one-priority/) [Next post](https://www.acronis.com/en/blog/posts/multi-tier-and-multi-tenant-capabilities-acronis-cloud-based-solutions-extend-customer-reach/) [Multi-Tier and Multi-Tenant Capabilities of Acronis Cloud-Based Solutions Extend Customer Reach](https://www.acronis.com/en/blog/posts/multi-tier-and-multi-tenant-capabilities-acronis-cloud-based-solutions-extend-customer-reach/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 4: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 5: Introducing New Acronis CEO: Prakash Panjwani](https://staticfiles.acronis.com/images/blog-card/30cb571f6f1aaa131733e5727a4a250c.png) [Introducing New Acronis CEO: Prakash Panjwani](https://www.acronis.com/en/blog/posts/introducing-new-acronis-ceo-prakash-panjwani/) We are pleased to announce the appointment of our new Chief Executive Officer, Prakash Panjwani. A veteran cybersecurity CEO, Panjwani previously served as CEO of WatchGuard Technologies and SafeNet. **October 15, 2026**2 min read ![Image 6: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read