Kaseya Ransomware Attack: What We Know as REvil Hackers Demand $70 Million

from The Wall Street Journal,

A group of Russian hackers calling themselves REvil is demanding $70 million to unlock computers swept up in a widespread ransomware attack that started to unfold July 2.

What happened in the Kaseya ransomware attack?

Kaseya Ltd. is a Miami-based company that provides software to help other businesses manage their networks. The hackers targeted Kaseya’s virtual systems/server administrator (VSA), a type of software that large companies and technology-service providers use to manage and send out software updates to systems on computer networks. The hackers were able to distribute ransomware by exploiting several vulnerabilities in the VSA software, a Kaseya spokeswoman said. By targeting Kaseya’s VSA, the hackers were able to open the door to infect more computers in what is known as a supply-chain attack.

More From The Wall Street Journal (subscription required):

365 Days Page
Comment ( 0 )