Hacked U.S. tech firm secures tool to restore services – .

Hacked U.S. tech firm secures tool to restore services – .

San Francisco (AFP)

A US tech company hit by a massive ransomware attack said it obtained a decryption tool that enabled it to unlock the networks of some 1,500 affected companies.

Miami-based Kaseya shut down its servers after the July 2 attack that hit businesses, from pharmacies to gas stations in at least 17 countries, and forced most of Sweden’s 800 Coop supermarkets to shut down for hours. days.

“We can confirm that Kaseya obtained the tool from a third party and that teams are actively helping customers affected by the ransomware restore their environments,” Kaseya said in a statement released Thursday.

The company did not disclose the third party used to obtain the decryptor or indicate whether it paid the hackers, who demanded $ 70 million in bitcoin in exchange for the data stolen in the attack.

“Kaseya is working with Emsisoft to support our customer engagement efforts, and Emsisoft has confirmed that the key is effective in unlocking victims,” the company added.

An increasingly lucrative form of digital hostage-taking, ransomware attacks typically see hackers encrypting victims’ data and then demanding money to restore access.

Experts believe it could be the biggest ransomware attack on record.

Russian hackers REvil, who posted private data of companies whose computers they took over on their “Happy Blog” to force them to pay ransom, are widely believed to be behind the scam. ransomware.

US President Joe Biden has warned his Russian counterpart Vladimir Putin against hosting cybercriminals and has suggested Washington may take action in the face of growing online attacks.

REvil went offline shortly after the warnings, giving rise to speculation whether their disappearance was the result of government action.

While Kaseya is little known to the public, analysts say it was a ripe target as its software is used by around 40,000 companies, allowing hackers to cripple many businesses in one fell swoop.

The company provides cybersecurity and IT services to small businesses, allowing hackers to invade Kaseya customers and affiliates.


Please enter your comment!
Please enter your name here