A new update from the list of recent cyberattacked tech companies — Kaseya has re-encrypted its breached network with undefined technology with the intent to avoid bad actors. The software management company’s announcement was directives focused on REvil — they requested $70 million worth of bitcoin as ransomware.
Kaseya offers remote software management as a service via VSA and celebrated July 4th with breached networks. The Russian ransomware group ghosted its ransomware forum without a trace — a webpage they have reportedly used several times in communicating with its victims while its server is hosted on the dark web.
REvil stole information about Kaseya’s clients that serve as leverage for duping the software management company. Kaseya’s previous announcement revealed they hired an undisclosed third-party cybersecurity company other than Microsoft to investigate its server breach.
The software management company has currently made appropriate fixes, encrypting its cracked network. A third-party cybersecurity company used its decryption technology to float the vulnerabilities that leeched access to REvil. “Kaseya obtained a decryptor for victims of the REvil ransomware attack, and we’re working to remediate customers impacted by the incident.”
Still, Kaseya is yet to confirm the technology its so‐called third-party cybersecurity company has used to restore encryption to its network, neither did Kaseya reveal if they paid the $70 million bitcoin ransomware — since the REvil abandoned the whole cyberattack campaign.
According to Bleeping Computer’s report, they uncovered the supposed third-party cybersecurity company Kaseya kept a secret due to the fear imbibed by the Russian ransomware group — that offers to breach its victims’ database as a service.
“Kaseya is working with Emsisoft to support our customer engagement efforts, and Emsisoft has confirmed the key is effective at unlocking victims,” Bleeping Computer writes.
However, other media houses have suggested either the US government, Emsisoft, or the untold REvil’s antidote they exchanged for the bitcoin.
After the public took note of Emsisoft’s involvement, Kaseya then opened up — the cybersecurity restored encryption to its server as well as other victims linked to this attack hit served by Emsisoft’s technology