I have all Apple products in my household, and am very security conscious. But the recent articles about ransomware infecting all sorts of computers got me thinking. Even if I was foolish enough to find a Mac ransomware program, download it, disable Sophos, disable SIP, and give said ransomware program my admin credentials, could it infect my iCloud Drive? I have regular hourly backups to my Time Machine so I am not worried about my data stored locally, but iCloud Drive items are stored on Apple's Servers as well as on my computer. So if ransomware encrypted all of my content in my iCloud Drive folder on my computer, would it update the files on the server, making recovery not possible?
For clarification, my questions are these:
- Does the iCloud Drive folder get backed up to my Time Machine?
- Does Apple make regular accessible backups of their user's content?
- Would the encrypted data be uploaded to iCloud replacing the old files on the server?