#Kaseya agent wiki update#

On July 5, Kaseya said that between 800 and 1,500 downstream businesses were impacted in the attack. They initially asked for a $70 million ransom payment to release a universal decryptor to unlock all affected systems. The REvil ransomware gang officially took credit for the attack and claimed to have encrypted more than one million systems during the incident.

#Kaseya agent wiki update#

They did not pay ransom, but rebuilt their systems from scratch after waiting for an update from Kaseya. The supermarket chain had to close down its 800 stores for almost a week, some in small villages without any other food shop. Initial reports of companies affected by the incident include Norwegian financial software developer Visma, who manages some systems for Swedish supermarket chain Coop. In response, the company shut down its VSA cloud and SaaS servers and issued a security advisory to any customers, including those with on-premises deployments of VSA. An authentication bypass vulnerability in the software allowed attackers to compromise VSA and distribute a malicious payload through hosts managed by the software, amplifying the reach of the attack.

The source of the outbreak was identified within hours to be VSA (Virtual System Administrator), a Remote monitoring and management software package developed by Kaseya. Since its founding in 2000, it has acquired 13 companies, which have in most cases continued to operate as their own brands (under the 'a Kaseya company' tagline), including Unitrends.

Owned by Insight Partners, Kaseya is headquartered in Miami, Florida with branch locations across the US, Europe, and Asia Pacific. It develops software for managing networks, systems, and information technology infrastructure. Kaseya Limited is an American software company founded in 2001. On 2 July 2021, a number of managed service providers (MSPs) and their customers became victims of a ransomware attack perpetrated by the REvil group, causing widespread downtime for over 1,000 companies.