Is there anyware azure can recover disk/VM data?

Question

Recently my azure windows VM got infected by MedusaLocker ransomware and all files are encryted. I don't have any backup or snapshot, Is there anyway azure have backup of disk or VM itself.

kindly help me recover my data if anyone knows.

Answer 1

Hi @Aashir Anwar ,

without a backup of the data there is no chance to decrypt the data that easy.
If you use a internet search engine of your choice and look for "Medusalocker decrypt" you will find some sources which mostly pointimg to 3rd party tools.

I have no experience by myself with any of the tools. For that reason I can't recommend any tool.

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 2

Hello @Aashir Anwar ,

Welcome to the Microsoft Q&A platform. Happy to answer your question.
Like @Andreas Baumgarten said, azure doesn't backup or keep any additional copy of your VMs nor the disks. It is a user responsibility to configure backups and set a retention policy on azure VM. It is recommend to protect your VM using some of the azure services like Azure VM backup or the disaster recovery feature called Azure Site Recovery. This is also recommended by azure security center

Going forward, please consider following the azure security recommendations and follow best practices to avoid these kind of situations. For more details refer to Security Recommendations

We don't have any tools on azure or by microsoft that can decrypt or recover the VM from ransomware. However, when I looked up for Medusalocker Decrypt, i found many third party tools that talks about way to recover the windows VMs. Please check on internet

Please "Accept as Answer" if any of above helped so that, it can help others in community looking for remediation for the similar issues.