CryptoLocker and Shadowcopies

[croquagei]

Hi everyone. I've got a question that I'm fairly sure I already know the answer to but i'd rather ask and be sure than feel like a fool.

Reading this article https://www.ixsystems.com/whats-new/defeating-cryptolocker/

Re CryptoLocker

CryptoLocker attacks attempt to destroy your backups on services like DropBox or in Windows Shadow Copies

Can a Windows machine infected corrupt the ZFS snapshots that are presented via SAMBA as Shadowcopies or are restricted to read only?

 

[Ericloewe]

Snapshots are read only (As is Windows' own Volume Shadow Copy Service, I believe), so not a chance in hell.