Kaseya ransomware attack INVOLVES REvil
The Kaseya ransomware attack involved REvil ransomware.
Explicit Confidence 99% · Will EP 126 Details
“The Kaseya attack popped up and it said – this is what REvil wrote”
Incident
incident:kaseya_ransomware_attack
Also: Kaseya attack, Kaseya incident
2021 REvil supply-chain attack involving Kaseya VSA and many downstream managed service provider customers.
2021 REvil supply-chain attack involving Kaseya VSA and many downstream managed service provider customers.
“one of the biggest supply chain incidents since NotPetya”
“they were able to hit 1,500 networks in one go overnight”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | INVOLVES | REvil | Explicit | 126 |
| outgoing | INVOLVES | supply chain attack | Explicit | 126 |
| outgoing | INITIAL_ACCESS_VIA | Kaseya VSA | Derived | 126 |
Kaseya ransomware attack INVOLVES REvil
The Kaseya ransomware attack involved REvil ransomware.
Explicit Confidence 99% · Will EP 126 Details
“The Kaseya attack popped up and it said – this is what REvil wrote”
Kaseya ransomware attack INVOLVES supply chain attack
The Kaseya incident was described as a major supply-chain incident because compromise of Kaseya reached downstream customers.
Explicit Confidence 99% · Will EP 126 Details
“The Kaseya, that was basically one of the biggest supply chain incidents since NotPetya.”
Kaseya ransomware attack INITIAL_ACCESS_VIA Kaseya VSA
REvil gained access to downstream networks through Kaseya VSA.
Derived Confidence 97% · Will EP 126 Details
“by going into the Kaseya software, REvil basically had a foothold into all of the MSP’s customers”