N-able Anomaly Detection: Identifying and Mitigating Credential-Based Threats

N-able-Anomaly-Detection-Identifying-and-Mitigating-Credential-Based-Threatsdata

Cybersecurity Threats to Backup Environments on the Rise: N-able Introduces Anomaly Detection

The increasing sophistication of identity-driven cyberattacks has led to a surge in threats targeting backup environments. In response, N-able has expanded its Anomaly Detection capabilities in Cove Data Protection to provide customers with real-time alerts when suspicious or unauthorized changes to backup policies are detected.

Stolen Credentials: A Growing Threat

According to the 2025 Verizon Data Breach Investigations Report, approximately 88% of basic web application breaches involved stolen credentials, highlighting the widespread nature of this tactic. Attackers using stolen or phished credentials can gain access to backup software, weaken backup policies, and make subtle changes that may go unnoticed for weeks or even months.

Consequences of Unauthorized Changes

Once inside, attackers can alter retention policies, exclude critical data from backups, and delete protected devices, ultimately rendering recovery impossible when a ransomware attack is launched. To combat this, Anomaly Detection introduces a vital layer of protection, providing IT teams with real-time visibility into changes to backup policies.

“The threat landscape has shifted, and backups are now firmly in the crosshairs,” said Neil Douglas, CIO at Network ROI, a UK-based managed IT services provider. “Attackers can manipulate backups, alter retention policies, or delete servers, and remain undetected for extended periods. Real-time alerts to backup policy changes offer customers peace of mind, protecting them from risky changes that could affect recovery.”
“A new wave of threats is targeting businesses through stolen identities. By catching changes to backup policies as they happen, organizations can stop identity-driven attacks and misconfigurations before recovery is compromised.” – Chris Groot, GM of Cove Data Protection

The Anomaly Detection feature is designed to provide an early warning system against credential-based tactics used by attackers to disable or corrupt backups before deploying ransomware. With this expanded capability, customers can rest assured that their backup environments are better protected against the growing threat of identity-driven cyberattacks.



About Author

en_USEnglish