Can Ransomware Infect OneDrive? How to Protect Your Files and Stay Safe | Halcyon.ai (2024)

FAQs

Can Ransomware Infect OneDrive? How to Protect Your Files and Stay Safe | Halcyon.ai? ›

Yes, ransomware can infect OneDrive.

Ransomware's entry points to a Microsoft 365 environment can occur through various vectors, such as phishing emails, attachments carrying malware, or compromised credentials. This could lead to the encryption of files in OneDrive, SharePoint, and Exchange Online, thus leaving them unavailable to users.

When a malicious file is uploaded to OneDrive, the file is synced to the local machine before being marked as malware. After the file is marked as malware, the user can't open the synced file from their local machine.

Sharing files on OneDrive is generally safe, thanks to the platform's robust security features designed to protect user data. OneDrive allows users to set specific permissions for shared files, controlling who can view, edit, or comment on them.

If your Microsoft account was hacked and synced, it is possible that the hackers may have accessed and synced your OneDrive, so your files on OneDrive may be leaked as well. Even if it says failed to sync, you should still consider it that your data on OneDrive is already leaked.

Delete the file (recommended)

To protect yourself, your computer, and your organization, the best option is to delete the file. From the OneDrive mobile app, your only option is to delete the file. Select the file you want to delete (on the mobile app, press and hold to select it). Select Delete.

You won't lose files or data by uninstalling OneDrive from your computer. You can always access your files by signing in to OneDrive.com. Select the Start button, type Programs in the search box, and then select Add or remove programs in the list of results.

Does ransomware lock your computer? ›

Ransomware is a type of malicious software that infects a computer and restricts users' access to it until a ransom is paid to unlock it. Ransomware variants have been observed for several years and often attempt to extort money from victims by displaying an on-screen alert.

The most common type of malicious file extension is .exe. This usually indicates an executable program which could contain a virus or other form of malware. Other malicious file extensions include . bat (batch files), .

Be sure Windows Security is turned on to help protect you from viruses and malware (or Windows Defender Security Center in previous versions of Windows 10). In Windows 10 or 11 turn on Controlled Folder Access to protect your important local folders from unauthorized programs like ransomware or other malware.

Controlled folder access helps protect your valuable data from malicious apps and threats, such as ransomware. Controlled folder access protects your data by checking apps against a list of known, trusted apps.

The simple answer is that cloud storage is not inherently immune to ransomware. However, as we will explore, cloud storage can give you a significant data protection advantage with more flexible recovery options.

Enable or Disable Ransomware Protection in Settings

Click on the Windows Security icon in the System Tray (lower-right corner). Click on Virus & threat protection. Scroll down and click on Manage ransomware protection. Toggle Controlled folder access on or off.

Delete the file (recommended)

To protect yourself, your computer, and your organization, the best option is to delete the file. From the OneDrive mobile app, your only option is to delete the file. Select the file you want to delete (on the mobile app, press and hold to select it). Select Delete.