--- title: "The Importance of Secure Backup Is Proven Again: Bad Rabbit Ransomware Encrypts Backup Files" description: Almost every new ransomware tries to delete or encrypt backup files – and Bad Rabbit is no exception. Too bad for cybercriminals that, starting with ... canonical_url: https://www.acronis.com/en/blog/posts/importance-secure-backup-proven-again-bad-rabbit-ransomware-encrypts-backup-files/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # The Importance of Secure Backup Is Proven Again: Bad Rabbit Ransomware Encrypts Backup Files As we already reported, a new ransomware outbreak occurred in Europe on October 24. It hit some companies in Russia, Ukraine, Germany and the U.S., preventing full operations for some companies even after two days. Bad Rabbit has numerous advanced features such as propagating over local networks, but most notably it’s actually attacking backup files. [Try Now](https://www.acronis.com/en/products/cloud/trial/) [![Image 2: MSP Threats Security Team](https://staticfiles.acronis.com/images/content/1578b8dff96325855c4525d865e7fc63.png)](https://www.acronis.com/en/blog/authors/acronis-security-team/ "MSP Threats Security Team") [MSP Threats Security Team](https://www.acronis.com/en/blog/authors/acronis-security-team/) 3 min read Last updated 27 November 2019 As we already [reported](https://www.acronis.com/en-us/blog/posts/bad-rabbit-new-ransomware-outbreak-europe), a new [ransomware](https://www.acronis.com/en-us/resource-center/resource/ransomware/) outbreak occurred in Europe on October 24. It hit some companies in Russia, Ukraine, Germany and the U.S., preventing full operations for some companies even after two days. Bad Rabbit has numerous advanced features such as propagating over local networks, but most notably it’s actually attacking backup files. ![Image 3: Ransomware attacks backup files](https://staticfiles.acronis.com/images/content/84400628479554b6111cb84d1148703e.png) Ransomware attacks backup files We’ve been reporting on this trend for a long time already: as users increasingly rely on backup, almost every new ransomware tries to delete or encrypt backup files – and Bad Rabbit is no exception. As you can see on a screenshot above, among other files it targets Acronis Backup files (*.tib). Too bad for cybercriminals that, starting with our Acronis True Image 2017 New Generation product, we’ve been providing robust, multilayered data protection through our Active Protection technology. In fact, Bad Rabbit illustrates the effectiveness of our proactive technology. Active Protection doesn’t need updates, an internet connection, or complex, preset rules to detect, stop and revert changes made by ransomware. We can proudly say that Acronis delivers the most secure backup in the world by providing the only solution combining active and passive data protection approaches. ## How Active Protection deals with Bad Rabbit and all ransomware attempts Let’s look how Active Protection cripples Bad Rabbit from doing anything bad, step-by-step. ![Image 4: Acronis Detects Bad Rabbit Ransomware](https://staticfiles.acronis.com/images/content/939a36752cffe4fa28db76fd34ae56ef.png) Acronis Detects Bad Rabbit Ransomware First of all, Acronis Active Protection detects malicious DDL runs via rundll32. The user is prompted to block the malicious process and Active Protection automatically reverts any unauthorized changes. It only takes a few seconds to get all your files back. If ransomware tries to change Master Boot Record (MBR) of your hard drive, Active Protection detects and stops this as well. ![Image 5: Acronis protects MBR from ransomware](https://staticfiles.acronis.com/images/content/5819e872b38b5a937fbcfca015b2c077.png) Acronis protects MBR from ransomware Finally, when Bad Rabbit or any other ransomware tries to encrypt backup files, those attacks are easily prevented thanks to robust self-protection technologies that are part of Acronis Active Protection. ![Image 6: Acronis Active Protection stops Bad Rabbit](https://staticfiles.acronis.com/images/content/3bc1ef794e433c4eaa6d8d08005e9848.png) Acronis Active Protection stops Bad Rabbit The self-protection functionally was independently tested earlier this year by Anti-malware-test.com’s laboratory and was proven being very efficient, while most of other backup solutions offered nearly no self-protection capabilities. ![Image 7: Acronis Active Protection tests](https://staticfiles.acronis.com/images/content/32f6fa760e694606ac109922da827198.png) Acronis Active Protection tests ## Secure backup that can combat ransomware is a must Think about it: If your anti-malware protection fails and your backup is encrypted by ransomware, your data will be lost forever. That is why it’s important to choose a secure backup solution that: * Includes proactive anti-ransomware technologies like [Acronis Active Protection](https://www.acronis.com/en-us/active-protection/). * Delivers multi-layered protection that works during all three stages of potential attack: proactive-active-reactive. * Offers robust self-protection capabilities that prevents malware from compromising backup files, either locally or in the cloud. * Is fast, since a slow recovery means lost time and money. Acronis technologies were independently tested as well and proven to be faster than competition. **Acronis secure backup solutions:** * For business — [Acronis Backup 12.5](https://www.acronis.com/en-us/business/backup/features/) * For home users — [Acronis True Image 2018](https://www.acronis.com/en-us/personal/computer-backup/) * For service providers — [Acronis Backup Cloud](https://www.acronis.com/en-us/cloud/service-provider/backup/) [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) ## Written by ![Image 8: MSP Threats Security Team](https://staticfiles.acronis.com/images/content/1578b8dff96325855c4525d865e7fc63.png) MSP Threats Security Team [Previous post](https://www.acronis.com/en/blog/posts/bad-rabbit-new-ransomware-outbreak-europe/) [Bad Rabbit — A New Ransomware Outbreak in Europe](https://www.acronis.com/en/blog/posts/bad-rabbit-new-ransomware-outbreak-europe/) [Next post](https://www.acronis.com/en/blog/posts/never-give-important-value-sport-and-business/) [Never Give Up — an Important Value in Sport and Business](https://www.acronis.com/en/blog/posts/never-give-important-value-sport-and-business/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 9: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 10: Introducing New Acronis CEO: Prakash Panjwani](https://staticfiles.acronis.com/images/blog-card/30cb571f6f1aaa131733e5727a4a250c.png) [Introducing New Acronis CEO: Prakash Panjwani](https://www.acronis.com/en/blog/posts/introducing-new-acronis-ceo-prakash-panjwani/) We are pleased to announce the appointment of our new Chief Executive Officer, Prakash Panjwani. A veteran cybersecurity CEO, Panjwani previously served as CEO of WatchGuard Technologies and SafeNet. **October 15, 2026**2 min read ![Image 11: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read