Security Affairs

SEPTEMBER 16, 2021

Researchers from Bitdefender released a free master decryptor for the REvil ransomware operation that allows past victims to recover their files for free. On July 2, the REvil gang hit the Kaseya cloud-based MSP platform impacting MSPs and their customers. The Tor leak site, the payment website “decoder[.]re”,

Ransomware 86

Ransomware Encryption Media Hacking 86

Cisco Security

JULY 8, 2021

This week I spoke to Cisco Talos’ US Outreach Team lead Nick Biasini to talk about the unfolding events surrounding the REvil ransomware campaign and Kaseya VSA supply chain attack. To stay up to date on this attack, please take a look at the Talos response post which is being continually updated.

Ransomware 126

Ransomware Software Social Engineering Cyber Attacks 126

Cisco Security

AUGUST 11, 2021

The REvil ransomware family has been in the news due to its involvement in high-profile incidents, such as the JBS cyberattack and the Kaseya supply chain attack. The threat actors behind REvil attacks operate under a ransomware-as-a-service model.

Ransomware 140

Ransomware DNS Encryption Backups 140

Security Boulevard

JANUARY 10, 2022

As Picus, we published a detailed blog post about the Tactics, Techniques, and Procedures (TTPs) used by HAFNIUM to target Microsoft Exchange Servers. DarkSide Ransomware Campaign. The DarkSide ransomware group provided Ransomware as a Service (RaaS) to other threat actors. Remote Code Execution. CVE-2021-27065.

Cyber threats 141

Cyber threats Ransomware Risk Architecture 141

Malwarebytes

MAY 6, 2022

The Malwarebytes Threat Intelligence team monitors the threat landscape continuously and produces monthly ransomware reports based on a mixture of proprietary and open-source intelligence. Onyx is a new ransomware gang based on the old Chaos builder. Ransomware attacks in April 2022. Attacks by ransomware type.

Ransomware 80

Ransomware Encryption Accountability Technology 80

Malwarebytes

JULY 7, 2021

Only rarely do companies allow us a look inside their organization while they are recovering from a ransomware attack. A positive exception to this is found in the Dutch managed service provider (MSP) VelzArt, one of the many unfortunate victims of Friday’s enormous, cascading supply-chain attack on Kaseya.

Ransomware 101

Ransomware Backups Software System Administration 101

Security Boulevard

FEBRUARY 10, 2022

However, recent attacks by advanced persistent threat (APT) groups have shown these longstanding security practices are no longer sufficient. Often, like in the case of ransomware, malicious code both benefits the attacker and harms the victim. Ransomware. Modern Malicious Code Sets Sights on Supply Chain.

Malware 96

Malware Software Ransomware Adware 96

Malwarebytes

FEBRUARY 1, 2023

Threat actors know that attacking the supply chain is not just a smart strategy but also a winning one. Because a smaller, less secure company like Fazio has access to a bigger, more secure company's system, attackers took the path of least resistance to install malware and steal credentials.

Software 72

Software Risk Backups Technology 72

Cisco Security

OCTOBER 6, 2021

There’s been no shortage of security headlines for us to reflect on, many of which are detailed on our Talos Threat Intelligence blog. The supply chain. Prior to 2021, supply chain attacks were assumed to exclusively be a tool for sophisticated state-sponsored threat actors only.

Cybersecurity 124

Cybersecurity Authentication Passwords Cryptocurrency 124

SecureWorld News

JULY 6, 2021

The latest update from the Kaseya CEO reveals the massive scope of a ransomware attack against the company's VSA service. The VSA service is used by managed service providers (MSPs) who help small and medium-sized businesses patch vulnerabilities and monitor endpoints. Who launched Kesaya ransomware attack?

Ransomware 98

Ransomware Small Business Government Hacking 98

SecureWorld News

JULY 6, 2021

The latest update from the Kaseya CEO reveals the massive scope of a ransomware attack against the company's VSA service. The VSA service is used by managed service providers (MSPs) who help small and medium-sized businesses patch vulnerabilities and monitor endpoints. Who launched Kesaya ransomware attack?

Ransomware 52

Ransomware Small Business Government Hacking 52

Security Boulevard

JULY 11, 2021

Ransomware is an epidemic that adversely affects the lives of both individuals and large companies, where criminals demand payments to release infected digital assets. The first ransomware, known as AIDS ( Aids Info Disk or PC Cyborg Trojan) , was observed in the wild already in 1989, spreading through the exchange of floppy disks.

Ransomware 119

Ransomware Software Encryption Risk 119