White House reaching out with assistance to latest ransomware victims – Security
The White House said it was reaching out to victims of a wide-ranging ransomware outbreak that is centred on IT company Kaseya and has had an impact on hundreds of businesses worldwide.
Kaseya has said that fewer than 60 of its customers had been “directly affected” by the attack.
But the full impact of the intrusion is still coming into focus, in part because the Kaseya software tool commandeered by the cyber criminals is used by so-called managed service providers, outsourcing shops that other businesses use to handle their back-office IT work, like installing updates.
One cyber security executive said his company alone had seen 350 customers attacked.
The White House deputy national security adviser for cyber and emerging technology, Anne Neuberger, said in a statement that the FBI and the Department of Homeland Security’s cyber arm “will reach out to identified victims to provide assistance based upon an assessment of national risk.”
President Joe Biden said on Saturday he directed US intelligence agencies to investigate who was behind the ransomware attack.
Security firm Huntress Labs said on Friday it believed the Russia-linked REvil ransomware gang was to blame for the latest outbreak.
Last month, the FBI blamed the same group for paralysing meat packer JBS SA.
Kaseya said on Sunday that it hired cyber security company FireEye to help deal with the fallout of the breach.
Those affected included schools, small public-sector bodies, travel and leisure organizations, credit unions and accountants,
The rash of German victims may be due to a major provider there having been compromised. Germany’s federal cybersecurity watchdog said on Sunday an unidentified IT service provider that looks after several thousand customers had been hit.
In some cases, chain reactions fed more widespread disruption.
The Swedish Coop grocery store chain had to close hundreds of stores on Saturday because its cash registers are run by Visma Esscom, which manages servers for a number of Swedish businesses and in turn uses Kaseya.
