Ransomwarecritical
Kaseya obtained universal decryptor for REvil ransomware attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-30116 | Credential Disclosure via Unauthenticated Download Page in Kaseya VSA | 9.8 | 86% | KEVRansomwarePoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | decoder.re | riously shut down.” The Tor leak site, the payment website “decoder[.]re”, and their backend infrastructure went offline simultane |
From the original article
3 min read at securityaffairs.com
The software provider Kaseya announced to have obtained a universal decryptor for the REvil ransomware. Earlier this month, a massive supply chain attack conducted by the REvil ransomware gang hit the cloud-based managed service provider platform Kaseya, impacting both other MSPs using its VSA software and their customers.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.