A sophisticated ransomware app could do this: stash away a snapshot from the users cloud backup (e.g. CrashPlan) and then change the local backup configuration to backup no folders at all, which in the case of CrashPlan also removes the historic archives of the users&#x27; data, as history is only kept for those folders that are currently backed up.