AMD could pay billions for this little-known company to close the gap with Nvidia and Intel
Acquisition of semiconductor rival Xilinx could cost AMD tens of billions.
Read More
Blog
- Home /
- Blog
Criminals target Kaseya victims with fake Microsoft update
Cybersecurity researchers have found evidence of an opportunistic email campaign to trick the victims of the Kaseya-REvil ransomware attack to take control over the functional machines in their network.
The notorious REvil gang conducted a massive supply chain ransomware attack late last week, which according to conservative estimates has affected thousands of businesses around the world.
The Malwarebytes Threat Intelligence Team has now shared details of a malspam campaign that falsely promises to deliver a Microsoft security update to help fix the vulnerability in Kaseya software that was exploited by REvil to deploy ransomware.
TechRadar needs you!
We're looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won't take more than 60 seconds of your time, and you can also choose to enter the prize draw to win a $100 Amazon voucher or one of five 1-year ExpressVPN subscriptions.
- We've put together a list of the best endpoint protection software
- Here's our choice of the best malware removal software on the market
- These are the best firewall apps and services
Although REvil claims to have infected over a million machines, Kaseya CEO Fred Voccola has said it was difficult to pin down the exact number of targets, since the victims were customers of its customers.
New malspam campaign
In a live blog, tracking the developments related to this particular ransomware campaign, Malwarebytes researchers have shared details of an email that is playing on the insecurities of victims, by offering them an update to help patch the Kaseya vulnerability.
“Guys please install the update from Microsoft to protect against ransomware as soon as possible. This is fixing a vulnerability in Kaseya,” reads the spurious email.
However, in the guise of the update, the attachment in the emails instead delivers the penetration testing software Cobalt Strike, which the attackers use to break into the victims’ network and machines.
Malwarebytes hasn’t speculated about the identity of the group behind this new malspam campaign.
- Protect your devices with these best antivirus software
Date
07 Jul 2021Sources
Other Blog
-
-
Last-minute Apple deals: price cuts on the Apple Watch, iPad, AirPods, and more
Last-minute Apple deals at Amazon include price cuts on the Apple Watch, iPad Pro, AirPods, and more.
Read More -
Now is the time to teach kids how to stay safe online
Practical advice for parents hoping to educate their children about online security.
Read More -
Apple's WWDC 2021: what three iPhone, Mac and iPad developers want to see
Interview: We asked three developers their wishes for Apple’s WWDC.
Read More
Find Out More About Us
Want to hire best people for your project? Look no further you came to the right place!