Components Affected
Kaseya’s IT management software
Overview
Kaseya has reported a potential security incident that involves its Virtual System Administration (VSA) software platform. VSA provides endpoint management and network monitoring.
Description
It has appeared that notaries REvil has pushed ransomware through an update of Kaseya’s IT management software hitting customers around the globe. Kaseya has taken necessary steps to shut down its SaaS as a precautionary measure while requesting on-premise customers to shut down their VSA servers.
Impact
✻Loss of important files and documents of your company’s data
✻May result in a complete shutdown of your company’s operations
✻Financial loss
Solution/ Workarounds
✻ Managed Service Providers (MSPs) and IT teams using Kaseya VSA are advised to follow Kaseya’s advisory to immediately shut down the VSA servers and follow the vendor’s website for further updates.
✻ Educate your workforce (precaution on emails, do not click unknown links, do not install unnecessary apps, use of USBs, etc)
✻ Implement proper backup policies and adhere to them strictly
✻ Never pay the ransom
✻ Have offline backups of important files
✻ Update and install latest security patches on installed 3 party software
✻ Keep your virus guard and operating system up to date
Reference
Disclaimer
The information provided herein is on an “as is” basis, without warranty of any kind.