Up to 1,500 businesses affected by ransomware attack, Kaseya CEO says

Re:Up to 1,500 businesses affected by ransomware attack, Kas... by dogman144 on Tuesday July 06, 2021 @02:20PM (#27752343)

This is a significantly false generalization about the TTPs for rware operators.

Vast majority of these attacks don't work with 0days. They work with malformed IAM policies, social engineering/phishing, and poor asset registries and cloud vis.

Keseya being a 0day is an outlier in many ways.

[ Parent | on HN ]

Re:Up to 1,500 businesses affected by ransomware attack, Kas... by steve_g on Tuesday July 06, 2021 @06:56PM (#27755404)

I thought this vulnerability had already been reported to Kaseya (privately), and they were working on it. Does that still qualify as a zero-day?

[ Parent | on HN ]

Re:Up to 1,500 businesses affected by ransomware attack, Kas... by user-the-name on Tuesday July 06, 2021 @02:24PM (#27752407)

It is an outlier today.

Do you think it will be an outlier in a year? In two years?

If a zero-day can gain you millions, tens of millions, maybe a hundred million dollars? Do you think we can keep operating the way we have been up until now?

[ Parent | on HN ]

Re:Up to 1,500 businesses affected by ransomware attack, Kas... by willcipriano on Tuesday July 06, 2021 @06:24PM (#27755157)

> Do you think it will be an outlier in a year? In two years?

I think it will remain a outlier until that becomes the easier/more economical way for them to do business. Right now there is so much low hanging fruit that I'd see no reason to invest in a bucket truck to get at the stuff further up the tree. I'd say your prediction is at least a few decades away.

[ Parent | on HN ]

Re:Up to 1,500 businesses affected by ransomware attack, Kas... by dogman144 on Tuesday July 06, 2021 @02:31PM (#27752501)

I don't think you work in infosec?

[ Parent | on HN ]