Comment by meowface

Backup to an external hard drive that you only leave connected during the backup, or a cloud service (ransomware could theoretically target these but so far have not), or do a "pull-style" backup where the machine doesn't have write access to the backup location.