Not sure if this is the appropriate forum but as close as I could find. My Windows 2012 server was taken out by ransomware despite having a Malwarebytes Premium account as well as Symantec Endpoint protection. Three hard drives full of data completely trashed. I cannot understand how this could happen?
As a clue - I was informed of Windows Updates in the usual way, and I downloaded and installed them. I was told the PC needed to be restarted but I could not do this immediately as users were working so I left it in this state for about five hours. When I did restart, the system was trashed.
I am wondering whether I was somehow duped into installing false Windows updates or if the delay between installing and restarting had anything to do with it?
Would appreciate feedback as this is extremely concerning.
