Kaseya VSA Zero Day Exploit Explained
This article explains the pre-auth remote code execution exploit against Kaseya VSA Server that was used in the mass Revil ransomware attack on July 2nd, 2021. On July 5th, after...
BlackMatter, a new ransomware group, claims link to DarkSide, REvil
BlackMatter is only one of a handful of new ransomware variants that started its operations not long ago.
There’s a new ransomware gang in town—and, frankly, we’re not at...
CNA legal filings lift the curtain on a Phoenix CryptoLocker ransomware attack
According to CNA, the attack started when an employee downloaded a fake browser from a legitimate website.
Two months after fully restoring its systems, CNA Financial, the leading US...
This Chat is Being Recorded: Egregor Ransomware Negotiations Uncovered
July 21, 2021 | By Chris Caridi co-authored by Allison Wikoff | 8 min read
Ransomware attacks are topping the charts as the most common attack type to target organizations with a constant drumbeat of attacks impacting industries...
Is crypto’s criminal rollercoaster approaching a terminal dip?
We look at whether the current environment will eventually become unsustainable for those wanting to exert others with ransomware.
It’s a turbulent time in the cryptomining realm, especially for...
Kaseya CEO: “The impact of this incredibly sophisticated attack is very minimal”
Kaseya CEO Fred Voccola gives us the facts in an emotionally charged video posted on the company's official YouTube channel.
The official YouTube channel of Kaseya, the latest organization...
3 things the Kaseya attack can teach us about ransomware recovery
Some lessons on dealing with ransomware recovery, thanks to the admirable transparency of a Dutch MSP impacted by the REvil attack on Kaseya.
Only rarely do companies allow us...
Babuk ransomware builder leaked following muddled “retirement”
Heads are being scratched after the Babuk ransomware builder appears on VirtuTotal, adding to the gang's reputation for confusion.
In the last days of April 2021, the operators...
City of Liège hit by ransomware, Ryuk suspected
Liège, the third largest city in Belgium and a major educational hub, has been hit by a ransomware attack.
Liège, the third largest city in Belgium, and a major...
Clop stopped? Ransomware gang loses Tesla and other treasures in police raid
Clop ransomware activity was stopped by Ukrainian cops on Wednesday who shut down the ransomware gang's infrastructure and made arrests.
Ukrainian law enforcement officials announced Wednesday that they had...
