When a ransomware attack escalates to full administrator credentials, the attacker doesn't stop at encrypting production files — they go after the backups too, deleting or overwriting every copy so the victim has no way back except paying. This simulator runs that exact attack against two cloud storage buckets side by side: a standard mutable bucket, where an authorized admin request is enough to erase every backup and every historical version, and an Object-Lock (WORM) enabled bucket, where objects locked for a retention period are immutable at the storage-service layer itself and reject the identical admin-authorized delete request until that retention period elapses.