Kaseya uses a mysterious decryption tool to restore data stolen in a ransomware attack

The IT software provider, Kaseya has announced that it will provide its customers with a decryption tool to restore customer data that was blocked in a ransomware attack earlier this month..

In a notice posted on its website on July 26, The global tech company said it worked with cybersecurity firm Emsisoft to help its customers recover their encrypted data.

He has released a mysterious “decryption” tool that allows customers to access data that has been blocked by malware. released in the July 2nd attack.

“The decryption tool was shown to be 100% effective at decrypting files that were fully encrypted in the attack.”

Kaseya uses a mysterious decryption tool to restore data stolen in a ransomware attack
Kaseya uses a mysterious decryption tool to restore data stolen in a ransomware attack

The company has denied having paid the $ 70 million in Bitcoin to the Russian hacker group REvil – which took responsibility for the attack.-. Nor did Kaseya reveal how she came across the decryption software, only that she didn’t pay a ransom to get it.

Kaseya confirmed that after consulting with experts, decided not to negotiate with the criminals who carried out the attack, says:

“We confirm that Kaseya did not pay any ransom, directly or indirectly through a third party, to obtain the decryptor.”

On July 2nd, the ransomware hacking group REvil brought the networks of at least 200 US companies to its knees by exploiting an unpatched zero-day vulnerability in Kaseya’s IT automation and management (VSA) software..

The news comes at a time when Ransomware is increasingly being scrutinized by lawmakers.

According to a Cointelegraph report dated July 9th Michele Korver’s appointment to the United States Financial Crimes Enforcement Network (FinCEN) promises to reduce illegal financial practices in the cryptocurrency space. During his previous tenure in the Justice Department, he developed the policy and legislation for the seizure and seizure of cryptocurrencies.

US senators and politicians have hit the cryptocurrency sector, largely blaming the technology phenomenon for the rise in ransomware attacks.. After the attacks on Colonial Pipeline and JBS in May and June, the US Senate called for action against cryptocurrencies after hackers branded digital assets as “preferential ransom payments”.

The meat company JBS paid REvil a $ 11 million ransom to Bitcoin, while Colonial made a $ 4.4 million BTC payment to DarkSide, connected with Russia.

Similar Posts