- Company
-
Products
Products
New ProductCloud Server
Fully managed virtual server infrastructure. Setup in minutes, hourly billing and 24/7 expert support so you can focus on your business.
Try Now -
Solutions
Backup & Security
Data SecurityRansomware & encryptionSilent Ransom: TDEProtection against TDE abuseCloud BackupSecure backup to data centersImage BackupFull disk image + fast recoveryOff-Site BackupOff-site disaster recoveryMobile BackupiOS & Android photos/contactsRansomware ProtectionAgainst ransomware attacksTwo-Factor Auth2FA account security - Plans
- Resources
- Partners
- Blog
Protect your database backups against TDE attacks with Narbulut Backup Now.
Data Security Solution
Silent Ransom: TDE Attack
An attacker switches on your database’s own legitimate encryption feature (Transparent Data Encryption) with a key only they control; your backups are silently poisoned for months. Narbulut Backup Now detects this threat before the backup is even taken.
The Threat
Why Can’t Traditional Backup Catch It?
The "Successful Backup" Illusion
Your backup system confirms the backup was taken intact — not that the data inside can still be opened. Encrypted data gets marked as a "successful backup" too.
The Backup Gets Encrypted Too
Backups copy your files just as they are. If a file is encrypted, its backup is encrypted as well — and the backup software never notices the difference.
Security Tools Don’t Notice
The attacker uses the system’s own everyday operations. Since no malicious software runs, security tools raise no alarm.
Real-Time TDE Detection on the Desktop
The Narbulut Backup Now desktop app flags TDE-encrypted databases with a lock icon. Any unexpected encryption becomes visible in the very first backup cycle.
Per-Installation Encryption Detail
Control all your users’ installations from a central panel; drill into each installation to review encryption status database by database. Pinpoint exactly which source a suspicious TDE encryption comes from.
Visibility in the Web Panel
Backed-up TDE-encrypted .bak files are listed with a red lock in the web panel; monitor the encryption status of your entire fleet from a single screen.
Automatic Warning Email
When encryption is detected, an automatic warning email is sent to the system administrator: "This database is encrypted — is this a configuration you expected?"
Protect Your Data Against Ransomware Attacks
Verified, secure backup against insidious threats like TDE abuse. Test Backup Now Pro right away with a free trial license.
Got questions?
Frequently asked questions about TDE attacks and Narbulut Backup Now protection. Contact us for more.
It is when an attacker enables the database’s legitimate Transparent Data Encryption with their own certificate and steals the key. The data stays encrypted and cannot be opened without paying the ransom.
Backup verification only checks integrity (checksum), not readability. Encrypted data is stored as a "successful backup."
Before every backup it checks the encryption status of your databases; if it finds unexpected TDE encryption it warns the administrator with a lock icon and an email.
All major SQL engines with encryption capability are at risk, including MSSQL, Oracle, MySQL/MariaDB and PostgreSQL.
Yes. In our blog post we share a ready-to-use TDE status query you can run via SSMS or sqlcmd.
