--- title: "FBI Warns of Malicious TDS Attacks Bypassing Fi… | Firevault" description: "FBI PSA I-061826-PSA warns of cyber criminals using Traffic Distribution Systems to deliver ransomware. Mark Fermor on the offline defence." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/news/fbi-warns-malicious-traffic-distribution-systems-ransomware#webpage", "url": "https://fire-vault.com/news/fbi-warns-malicious-traffic-distribution-systems-ransomware", "name": "FBI Warns of Malicious TDS Attacks Bypassing Fi…", "description": "FBI PSA I-061826-PSA warns of cyber criminals using Traffic Distribution Systems to deliver ransomware. Mark Fermor on the offline defence.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/c20d33f4-5ec7-45d2-b964-9ca4f26d0096/fbi-warns-malicious-traffic-distribution-systems-ransomware-1783666486000-2x.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/news/fbi-warns-malicious-traffic-distribution-systems-ransomware#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/news/fbi-warns-malicious-traffic-distribution-systems-ransomware#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "FBI Warns of Malicious TDS Attacks Bypassing Firewalls", "item": "https://fire-vault.com/news/fbi-warns-malicious-traffic-distribution-systems-ransomware" } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "FBI Warns of Malicious TDS Attacks Bypassing Firewalls", "description": "FBI PSA I-061826-PSA warns of cyber criminals using Traffic Distribution Systems to deliver ransomware. Mark Fermor on the offline defence.", "url": "https://fire-vault.com/news/fbi-warns-malicious-traffic-distribution-systems-ransomware", "image": [ { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/c20d33f4-5ec7-45d2-b964-9ca4f26d0096/fbi-warns-malicious-traffic-distribution-systems-ransomware-1783666486000-2x.jpg", "width": 1200, "height": 1200 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/c20d33f4-5ec7-45d2-b964-9ca4f26d0096/fbi-warns-malicious-traffic-distribution-systems-ransomware-1783666486000-2x.jpg", "width": 1200, "height": 900 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/c20d33f4-5ec7-45d2-b964-9ca4f26d0096/fbi-warns-malicious-traffic-distribution-systems-ransomware-1783666486000-2x.jpg", "width": 1200, "height": 675 } ], "thumbnailUrl": "https://fire-vault.com/__l5e/assets-v1/c20d33f4-5ec7-45d2-b964-9ca4f26d0096/fbi-warns-malicious-traffic-distribution-systems-ransomware-1783666486000-2x.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Director & Co-Founder", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@type": "NewsMediaOrganization", "name": "Firevault", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 600, "height": 60 } }, "datePublished": "2026-07-10T06:56:32.028418+00:00", "dateModified": "2026-08-11T21:29:24.285561+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/news/fbi-warns-malicious-traffic-distribution-systems-ransomware" }, "inLanguage": "en-GB", "articleSection": "Breach Analysis", "wordCount": 968, "keywords": "Breach Analysis, data breach, cyber security, offline secure storage, data protection, physical air gap", "articleBody": "The Federal Bureau of Investigation (FBI) has released a Public Service Announcement detailing a sophisticated threat where cyber criminals use malicious Traffic Distribution Systems (TDSs) to bypass traditional security measures. The alert, I-061826-PSA published on 18 June 2026, warns that these systems are being used to redirect unsuspecting users to fraudulent websites, leading to ransomware i", "dateline": "United Kingdom", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".article-summary", "h2" ] }, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2026 } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Overview What The FBI WarnedHow A Malicious TDS WorksWhy Network Defences Are Not EnoughThe Offline AlternativeKey TakeawaysShareMore Resources [Knowledge Vault](/learn/knowledge)/ Breach Analysis Breach Analysis · 10 July 2026 # FBI Warns of Malicious TDS Attacks Bypassing Firewalls FBI PSA I-061826-PSA warns of cyber criminals using Traffic Distribution Systems to deliver ransomware. Mark Fermor on the offline defence. ![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg) Mark Fermor Director & Co-Founder, Firevault 5 min read Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Ffbi-warns-malicious-traffic-distribution-systems-ransomware)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Ffbi-warns-malicious-traffic-distribution-systems-ransomware&text=FBI%20Warns%20of%20Malicious%20TDS%20Attacks%20Bypassing%20Firewalls%0A%0AFBI%20PSA%20I-061826-PSA%20warns%20of%20cyber%20criminals%20using%20Traffic%20Distribution%20Systems%20to%20deliver%20ransomware.%20Mark%20Fermor%20on%20the%20offline%20defence.)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2Ffbi-warns-malicious-traffic-distribution-systems-ransomware)[](mailto:?subject=FBI%20Warns%20of%20Malicious%20TDS%20Attacks%20Bypassing%20Firewalls&body=FBI%20PSA%20I-061826-PSA%20warns%20of%20cyber%20criminals%20using%20Traffic%20Distribution%20Systems%20to%20deliver%20ransomware.%20Mark%20Fermor%20on%20the%20offline%20defence.%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2Ffbi-warns-malicious-traffic-distribution-systems-ransomware) ![Empty modern data centre corridor at night with magenta accent lighting on server cabinet edges](/__l5e/assets-v1/c20d33f4-5ec7-45d2-b964-9ca4f26d0096/fbi-warns-malicious-traffic-distribution-systems-ransomware-1783666486000-2x.jpg) Breach Analysis Article record **Breach Analysis**Category **10 July 2026**Published **5 min read**Reading time **Mark Fermor**Written by Empty modern data centre corridor at night with magenta accent lighting on server cabinet edges Why it matters ## What this means for organisations holding critical data FBI PSA I-061826-PSA warns of cyber criminals using Traffic Distribution Systems to deliver ransomware. Mark Fermor on the offline defence. In this analysis 1. 01 [What The FBI Warned](#section-0) 2. 02 [How A Malicious TDS Works](#section-1) 3. 03 [Why Network Defences Are Not Enough](#section-2) 4. 04 [The Offline Alternative](#section-3) 5. 05 [Key Takeaways](#section-4) **On this page**[What The FBI Warned](#section-0)[How A Malicious TDS Works](#section-1)[Why Network Defences Are Not Enough](#section-2)[The Offline Alternative](#section-3)[Key Takeaways](#section-4) The Federal Bureau of Investigation (FBI) has released a Public Service Announcement detailing a sophisticated threat where cyber criminals use malicious Traffic Distribution Systems (TDSs) to bypass traditional security measures. The alert, I-061826-PSA published on 18 June 2026, warns that these systems are being used to redirect unsuspecting users to fraudulent websites, leading to ransomware infections and significant financial fraud. As organisations fortify their digital perimeters, attackers are continuously evolving their methods to find new vulnerabilities, making robust data protection strategies more critical than ever. ## What The FBI Warned According to the FBI’s Internet Crime Complaint Centre (IC3), criminals are leveraging TDSs as a core component in their attack chain. A TDS is a technology designed to route internet visitors to different destinations based on a range of factors after they click on a link, advertisement, or download. Whilst these have legitimate uses in marketing and content delivery, their power is being abused for nefarious ends. The FBI has identified that attackers are compromising legitimate websites, often through weak passwords or outdated plugins, and injecting code that sends visitors to a malicious TDS. Other initial attack vectors include Search Engine Optimisation (SEO) poisoning, where criminals create malicious pages that rank highly in search results, and classic phishing emails with deceptive links. Once a user clicks a compromised link, they are silently handed off to the TDS, which then begins a process of evaluation before sending them to a final, malicious destination. The ultimate goal is to deploy a harmful payload, such as ransomware, or to trick the user into divulging sensitive financial information. ## How A Malicious TDS Works A malicious TDS acts as an intelligent, clandestine gatekeeper. Instead of a direct link from a legitimate site to a malicious one, the user is passed through a chain of intermediate nodes. This complex path helps to hide the final destination and can make it difficult for network security tools to trace the connection back to its source. The true danger of a TDS lies in its filtering capabilities. The system can inspect a visitor based on their IP address, geographical location, operating system, browser type, and even device. Using these filters, the TDS can specifically target victims it deems valuable, whilst redirecting anyone who appears to be a security researcher or an automated analysis tool to a harmless website. This built-in evasion makes the malicious activity incredibly difficult to detect and analyse. If a user is identified as a suitable target, the TDS forwards them to the final payload. This could be a convincing phishing page designed to look like a legitimate bank or email login, a website that triggers a drive-by malware download, or a page promoting a financial scam. In some cases, the attackers do not deploy the payload themselves; instead, they sell the verified network access to other criminal enterprises, including notorious ransomware groups. ## Why Network Defences Are Not Enough The FBI has provided clear advice for businesses to help defend against these threats. Their recommendations include changing default file associations for JavaScript files, monitoring script execution processes like wscript.exe that invoke web requests, auditing content management system (CMS) and hosting accounts for unauthorised changes, and enforcing strong, unique passwords. Furthermore, they advise keeping all CMS platforms and plugins patched and providing user training on phishing awareness. However, as Firevault security commentator Mark Fermor explains, these measures cannot be considered foolproof. "The FBI advice is excellent security hygiene, but we must acknowledge the reality that malicious TDSs are engineered specifically to defeat the network-based defences many organisations rely on," states Fermor. "Firewalls, Web Application Firewalls, and even advanced Endpoint Detection and Response (EDR) tools can be bypassed. The TDS is designed to test the incoming connection and, if it detects the signature of a security sandbox or a corporate proxy, it will simply serve benign content. The attacker can wait for the perfect moment to strike a vulnerable, unfiltered user." ## The Offline Alternative "Endpoint and network security provide essential, valuable layers of defence, but they are permeable layers," Fermor continues. "When a sophisticated attack like this succeeds and an endpoint is compromised, the question is no longer about prevention but about recovery. If ransomware gets a foothold in your network, it will attempt to encrypt everything it can reach, including your local and network-attached backups." This is where an offline data storage strategy becomes paramount. Mark Fermor emphasises that data which is not physically connected to the network cannot be attacked. "A TDS-delivered payload cannot traverse a [physical air gap](/offline-secure-storage/what-is-oss). Ransomware cannot encrypt a storage device that is sitting on a shelf, completely disconnected from the compromised server. Firevault provides this critical Layer 1 physical air gap, ensuring that even if the worst happens and your live network is breached, your most valuable data backups and archives remain completely untouched and available for a full recovery. It is the ultimate failsafe in an era of increasingly evasive digital threats." ## Key Takeaways - **FBI Alert:** Cyber criminals are actively using malicious Traffic Distribution Systems to redirect users, bypass security, and deploy ransomware or financial scams. - **Complex Evasion:** These systems use sophisticated filtering based on user location, device, and software to target victims while actively hiding from security researchers. - **Attack Vectors:** Initial infection occurs through SEO poisoning, phishing emails, or legitimate websites compromised with malicious redirects. - **Network Defences Can Fail:** As Mark Fermor highlights, TDSs are designed to probe for and evade firewalls and other security tools, making detection and prevention extremely challenging. - **The Air Gap Solution:** A physical air gap, as provided by Firevault’s offline storage, is the only method that guarantees data is immune to network-based attacks like ransomware delivered via a TDS. - **Proactive Measures:** Businesses should still implement the FBI's recommended security hygiene, including patching, password management, and user training, as part of a defence-in-depth strategy. About the author ![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg) ### Mark Fermor [](https://www.linkedin.com/in/mfermor) Director & Co-Founder Co-founder of Firevault, focused on offline secure storage and protecting individuals and businesses from fraud, fines, loss and damage. Speaker, owner and advisor. The Firevault view**Offline Secure Storage® keeps a clean copy beyond the reach of an attacker.**[Why #OSS →](/why-oss) Control systems and access**Cut the physical paths attackers and third parties depend on.**[Explore Control →](/solutions/control) Get started**Get started, or talk to a member of the team.**[Get started →](/get-started) How Firevault would handle this ## Physical disconnection removes the path an attacker needs Offline Secure Storage® holds a clean copy of your data on hardware that is physically disconnected, so an intrusion cannot reach it, encrypt it or delete it. [Get started](/get-started)[Talk to the team](/demo) **Hardware**Your data sits on dedicated encrypted hardware **Disconnect**Offline by default, connected only when you say so **Command**Access windows and retrieval under your control **Location**Held in a secure Firevault Bunker Related Reading ## You may also find these useful [ ![AnMed Closes Facilities Following Ransomware Attack and Data Claims](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/anmed-facility-closures-following-ransomware-cyberattack-1786723492583.png) Breach Analysis ### AnMed Closes Facilities Following Ransomware Attack and Data Claims South Carolina health system AnMed was forced to close 83 facilities following a cyberattack. Threat actors subsequently claimed to hold 6 terabytes of sensitive patient records. 14 Aug 2026 4 min ](/news/anmed-facility-closures-following-ransomware-cyberattack)[ ![US directive allows private firms to conduct offensive cyber operations](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/us-directive-private-firms-offensive-cyber-operations-1786723418300.png) Breach Analysis ### US directive allows private firms to conduct offensive cyber operations US President Donald Trump has signed a memorandum permitting private firms to execute offensive cyber operations. The move raises new risks of retaliatory attacks and collateral system disruptions. 14 Aug 2026 3 min ](/news/us-directive-private-firms-offensive-cyber-operations)[ ![Adobe Commerce attacked immediately after session breach vulnerability](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/adobe-commerce-session-vulnerability-exploited-after-disclosure-1786684691416.png) Breach Analysis ### Adobe Commerce attacked immediately after session breach vulnerability Security firm Sansec blocked attacks targeting Adobe Commerce immediately after disclosure. The flaw allows unauthenticated attackers to hijack sessions and customer data. 14 Aug 2026 4 min ](/news/adobe-commerce-session-vulnerability-exploited-after-disclosure)[ ![Cornelius faces legal investigation after alleged Cl0p cyber attack](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/cornelius-alleged-clop-ransomware-data-breach-1786684482605.png) Breach Analysis ### Cornelius faces legal investigation after alleged Cl0p cyber attack Cornelius faces legal scrutiny following reports of a Cl0p ransomware breach in August 2026. Claims suggest thousands of gigabytes of corporate data were compromised. 14 Aug 2026 4 min ](/news/cornelius-alleged-clop-ransomware-data-breach)[ ![Rogue Wi-Fi at 35,000 Feet: What the Delta Flight 591 Incident Teaches About Network Trust](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/news%2Fdelta-rogue-wifi-defcon-2026.jpg) Breach Analysis ### Rogue Wi-Fi at 35,000 Feet: What the Delta Flight 591 Incident Teaches About Network Trust Delta Air Lines is investigating an unauthorised Wi-Fi network broadcast aboard Flight 591 from Las Vegas to Atlanta, alongside a deauthentication attack that knocked passengers off the aircraft network. The lesson is not about aviation. It is about how easily a trusted connection can be impersonated. 13 Aug 2026 4 min ](/news/delta-flight-rogue-wifi-deauth-attack-def-con-2026)[ ![Ransomware Attacks Spike 20% in July While AI Steals the Headlines](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/news%2Fransomware-spike-ai-distraction.jpg) Breach Analysis ### Ransomware Attacks Spike 20% in July While AI Steals the Headlines Ransomware attacks jumped nearly 20 per cent in July, with 799 incidents logged globally. While AI dominates security headlines, finance, technology, pharmaceutical, medical billing and education organisations absorbed the sharpest increases. 12 Aug 2026 4 min ](/news/ransomware-attacks-spike-july-2026-ai-distraction) Share this article Breach Analysis 10 July 2026 5 min read ## FBI Warns of Malicious TDS Attacks Bypassing Firewalls FBI PSA I-061826-PSA warns of cyber criminals using Traffic Distribution Systems to deliver ransomware. Mark Fermor on the offline defence. ![FBI Warns of Malicious TDS Attacks Bypassing Firewalls](/__l5e/assets-v1/c20d33f4-5ec7-45d2-b964-9ca4f26d0096/fbi-warns-malicious-traffic-distribution-systems-ransomware-1783666486000-2x.jpg) ![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg) Published by Mark Fermor , Director & Co-Founder Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Ffbi-warns-malicious-traffic-distribution-systems-ransomware)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Ffbi-warns-malicious-traffic-distribution-systems-ransomware&text=FBI%20Warns%20of%20Malicious%20TDS%20Attacks%20Bypassing%20Firewalls%0A%0AFBI%20PSA%20I-061826-PSA%20warns%20of%20cyber%20criminals%20using%20Traffic%20Distribution%20Systems%20to%20deliver%20ransomware.%20Mark%20Fermor%20on%20the%20offline%20defence.)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2Ffbi-warns-malicious-traffic-distribution-systems-ransomware)[](mailto:?subject=FBI%20Warns%20of%20Malicious%20TDS%20Attacks%20Bypassing%20Firewalls&body=FBI%20PSA%20I-061826-PSA%20warns%20of%20cyber%20criminals%20using%20Traffic%20Distribution%20Systems%20to%20deliver%20ransomware.%20Mark%20Fermor%20on%20the%20offline%20defence.%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2Ffbi-warns-malicious-traffic-distribution-systems-ransomware) [Read full article](https://fire-vault.com/news/fbi-warns-malicious-traffic-distribution-systems-ransomware) ## Suggested Reading - [What is Offline Secure Storage The foundation of physical disconnection ](/offline-secure-storage/what-is-oss) - [Why Offline Secure Storage The case for physical control ](/why-oss) - [Ransomware Defence Hold gold copies offline ](/oss-for-ransomware-recovery) - [Control Physical path control for IT and OT ](/solutions/control) - [Knowledge Vault All articles, guides and whitepapers ](/learn/knowledge) - [Book a Demo See Firevault in action ](/demo) [Back to Knowledge Vault](/learn/knowledge)