Is there a best practice way to mitigate time-bomb ransomware attack attempts – especially if auto-backups are used?