A Ukrainian researcher revealed the operations of Trickbot, one of the most powerful cybercriminal enterprises with its Conti ransomware, after the group defended Russia; chats range from hospital attack plan to hackers grousing about vacation
More From The Wall Street Journal (subscription required):
A group of Russian hackers calling themselves REvil is demanding $70 million to unlock computers swept up in a widespread ransomware attack that started to unfold July 2.
What happened in the Kaseya ransomware attack?
Kaseya Ltd. is a Miami-based company that provides software to help other businesses manage their networks. The hackers targeted Kaseya’s virtual systems/server administrator (VSA), a type of software that large companies and technology-service providers use to manage and send out software updates to systems on computer networks. The hackers were able to distribute ransomware by exploiting several vulnerabilities in the VSA software, a Kaseya spokeswoman said. By targeting Kaseya’s VSA, the hackers were able to open the door to infect more computers in what is known as a supply-chain attack.
More From The Wall Street Journal (subscription required):
