Ransomware attack on software manager hits 200 companies

[Nevilledog]

Link to tweet

Tweet text:
Kevin Collier
@kevincollier
·
Jul 2, 2021
New and developing: An enormous supply-chain ransomware attack, potentially the single largest criminal ransomware spree in history, is happening now at the start of the 4th of July weekend

Ransomware attack on software manager hits 200 companies
A successful ransomware attack on a single company has spread to at least 200 organizations, according to cybersecurity firm Huntress Labs, making it one of
nbcnews.com

Kevin Collier
@kevincollier
Initial estimates of 200 companies affected. But the hackers got at least four managed service providers. The final tally could rise by orders of magnitude.
2:36 PM · Jul 2, 2021

https://www.nbcnews.com/tech/security/ransomware-attack-software-manager-hits-200-companies-rcna1338

A successful ransomware attack on a single company has spread to at least 200 organizations, according to cybersecurity firm Huntress Labs, making it one of the single largest criminal ransomware sprees in history.

The attack, first revealed Friday afternoon, is believed to be affiliated with the prolific ransomware gang REvil and perpetuated through Kaseya, an international company that remotely controls programs for companies that, in turn, manage internet services for businesses.

Kaseya announced Friday afternoon it was attacked by hackers and warned all its customers to immediately stop using its service.

At least four of Kaseya's immediate customers were hacked, said John Hammond, a senior security researcher at Huntress, which is helping with Kaseya's response.

*snip*

[Hekate]

1. Yes, of course

[getagrip_already]

2. as long as its cheaper for companies to buy insurance and pay off attackers than taking precautions.

This will happen over and over.

It is currently far cheaper to by a cyberinsurance policy than to take steps to protect an enterprise from attack.

Expect these attacks to snowball to the point where they become the insurance companies and the attacker in one.

The only way to stop this nonesense is to take the profit out of it. Mandate that insurance and companies directly not be allowed to pay ransoms.

That will stop it as defenses increase and the attackers profits disappear.

[crickets]

3. +1