It has been found that the ransomware spread through software created by Florida-based IT company Kaseya in what is another massive supply chain attack.
Hacking group REvil, which was behind attacks such as those on Acer in early 2021, has returned in force evidently, after approximately 200 U.S. businesses were hit by ransomware overnight. It has been found that the ransomware spread through software created by Florida-based IT company Kaseya in what is another massive supply chain attack. Yesterday, Kaseya reported at 4:00 pm EST that it was „experiencing a potential attack against the VSA,“ its remote monitoring and management tool. At the time, it was recommended that VSA customers immediately shut down servers until further notice, as the attacker would first disable administrative access to VSA if they managed to breach the system. With this, both the Cybersecurity and Infrastructure Security Agency (CISA) and Kaseya began investigating the situation.
