{"id":648,"date":"2021-07-08T06:04:44","date_gmt":"2021-07-08T06:04:44","guid":{"rendered":"https:\/\/www.tsfactory.com\/forums\/?p=648"},"modified":"2021-07-08T06:05:21","modified_gmt":"2021-07-08T06:05:21","slug":"gang-behind-huge-cyber-attack-demands-70m-in-bitcoin","status":"publish","type":"post","link":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/","title":{"rendered":"Gang behind huge cyber-attack demands $70m in Bitcoin"},"content":{"rendered":"
\n
\n

The gang behind a “colossal” ransomware attack has demanded $70m (\u00a350.5m) paid in Bitcoin in return for a “universal decryptor” that it says will unlock the files of all victims.<\/b><\/p>\n<\/div>\n<\/div>\n

\n
\n

The REvil group claims its malware, which initially targeted US IT firm Kaseya, has hit one million “systems”.<\/p>\n<\/div>\n<\/div>\n

\n
\n

This number has not been verified and the exact total of victims is unknown.<\/p>\n<\/div>\n<\/div>\n

\n
\n

However, it does include\u00a0500 Swedish Coop supermarkets<\/a>\u00a0and\u00a011 schools in New Zealand.<\/a><\/p>\n<\/div>\n<\/div>\n

\n
\n

Two Dutch IT firms have also been hit, according to\u00a0local media reports.<\/a><\/p>\n<\/div>\n<\/div>\n

\n

Counting victims<\/h2>\n<\/div>\n
\n
\n

On Friday, cyber-security firm Huntress Labs estimated<\/a>\u00a0about 200 firms had been affected.<\/p>\n<\/div>\n<\/div>\n

\n
\n

The “supply chain” attack initially targeted Kaseya, before spreading through corporate networks that use its software.<\/p>\n<\/div>\n<\/div>\n

\n
\n

Kaseya said that fewer than 40<\/a>\u00a0of its own customers had been affected.<\/p>\n<\/div>\n<\/div>\n

\n
\n

But because Kaseya provides software to managed service providers, firms which themselves provide outsourced IT services to other companies, the number of victims may be much greater.<\/p>\n<\/div>\n<\/div>\n

\n
\n

And the number of individual computer systems within those victim organisations could be greater still.<\/p>\n<\/div>\n<\/div>\n

\n
\n

Kaseya chief executive Fred Voccola told the Associated Press<\/a>\u00a0that the number of victims would probably be in the low thousands, made up of small organisations such as dental practices and libraries.<\/p>\n

\n
\n

For hundreds, perhaps thousands, of IT teams around the world this ransomware attack is a horrendous headache that is still growing.<\/p>\n<\/div>\n<\/div>\n

\n
\n

But the way the cyber-security world has pulled together to reduce the impact of the attack has been incredible.<\/p>\n<\/div>\n<\/div>\n

\n
\n

Cyber-defenders, both private and public sector, have been issuing alerts while experts work out how best to untangle the web of victims.<\/p>\n<\/div>\n<\/div>\n

\n
\n

There could have been far more victims if it wasn’t for a busy and stressful weekend of work.<\/p>\n<\/div>\n<\/div>\n

\n
\n

However, we now know that the secret digital doorway in the Kaseya system that let in the REvil hackers was known about before the attack.<\/p>\n<\/div>\n<\/div>\n

\n
\n

Researchers from the Dutch Institute for Vulnerability Disclosure found the problem and were helping Kaseya plug the hole long before the hackers found it.<\/p>\n<\/div>\n<\/div>\n

\n
\n

It was a case of the good hackers racing to stop the bad hackers from getting in and, as Victor Gevers from the institute puts it: “Unfortunately, we were beaten by REvil in the final sprint.”<\/p>\n<\/div>\n<\/div>\n

\n
\n

This case shows how skilled, persistent and determined these criminals are, and that in spite of all the efforts of the cyber-security world, we are losing the race against ransomware.<\/p>\n<\/div>\n<\/div>\n

\n
\n
\"2px<\/span><\/div>\n<\/figure>\n<\/div>\n
\n
\n

“The scale and sophistication of this global crime is rare, if not unprecedented,” Prof Ciaran Martin, founder of the National Cyber Security Centre,\u00a0told Radio 4’s Today programme.<\/a><\/p>\n<\/div>\n<\/div>\n

\n
\n

Most of REvil’s members are believed to be based in Russia or countries that were formerly part of the Soviet Union.<\/p>\n<\/div>\n<\/div>\n

\n
\n

Prof Martin criticised Russia for providing a safe environment for ransomware hackers, but said that the West was making it too easy for these gangs to be paid and “unsurprisingly they are coming back for more”.<\/p>\n<\/div>\n<\/div>\n

Source: BBC News<\/p>\n

Read the Full Story Here<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

The gang behind a “colossal” ransomware attack has demanded $70m (\u00a350.5m) paid in Bitcoin in return for a “universal decryptor” that it says will unlock the files of all victims. The REvil group claims its malware, which initially targeted US IT firm Kaseya, has hit one million “systems”. This number has not been verified and […]<\/p>\n","protected":false},"author":2,"featured_media":256,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-648","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"yoast_head":"\nGang behind huge cyber-attack demands $70m in Bitcoin - Community<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Gang behind huge cyber-attack demands $70m in Bitcoin - Community\" \/>\n<meta property=\"og:description\" content=\"The gang behind a “colossal” ransomware attack has demanded $70m (\u00a350.5m) paid in Bitcoin in return for a “universal decryptor” that it says will unlock the files of all victims. The REvil group claims its malware, which initially targeted US IT firm Kaseya, has hit one million “systems”. This number has not been verified and […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/\" \/>\n<meta property=\"og:site_name\" content=\"Community\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/TSFactoryLLC\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-08T06:04:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-07-08T06:05:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2020\/07\/black-macbook-pro-2473183.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Chelsie Wyatt\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@TSFactoryLLC\" \/>\n<meta name=\"twitter:site\" content=\"@TSFactoryLLC\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chelsie Wyatt\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/\",\"url\":\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/\",\"name\":\"Gang behind huge cyber-attack demands $70m in Bitcoin - Community\",\"isPartOf\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2020\/07\/black-macbook-pro-2473183.jpg\",\"datePublished\":\"2021-07-08T06:04:44+00:00\",\"dateModified\":\"2021-07-08T06:05:21+00:00\",\"author\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#primaryimage\",\"url\":\"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2020\/07\/black-macbook-pro-2473183.jpg\",\"contentUrl\":\"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2020\/07\/black-macbook-pro-2473183.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.tsfactory.com\/forums\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Gang behind huge cyber-attack demands $70m in Bitcoin\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#website\",\"url\":\"https:\/\/www.tsfactory.com\/forums\/\",\"name\":\"Community\",\"description\":\"TSFactory\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.tsfactory.com\/forums\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f\",\"name\":\"Chelsie Wyatt\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g\",\"caption\":\"Chelsie Wyatt\"},\"url\":\"https:\/\/www.tsfactory.com\/forums\/blog\/author\/chelsie\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Gang behind huge cyber-attack demands $70m in Bitcoin - Community","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/","og_locale":"en_US","og_type":"article","og_title":"Gang behind huge cyber-attack demands $70m in Bitcoin - Community","og_description":"The gang behind a “colossal” ransomware attack has demanded $70m (\u00a350.5m) paid in Bitcoin in return for a “universal decryptor” that it says will unlock the files of all victims. The REvil group claims its malware, which initially targeted US IT firm Kaseya, has hit one million “systems”. This number has not been verified and […]","og_url":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/","og_site_name":"Community","article_publisher":"https:\/\/www.facebook.com\/TSFactoryLLC\/","article_published_time":"2021-07-08T06:04:44+00:00","article_modified_time":"2021-07-08T06:05:21+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2020\/07\/black-macbook-pro-2473183.jpg","type":"image\/jpeg"}],"author":"Chelsie Wyatt","twitter_card":"summary_large_image","twitter_creator":"@TSFactoryLLC","twitter_site":"@TSFactoryLLC","twitter_misc":{"Written by":"Chelsie Wyatt","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/","url":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/","name":"Gang behind huge cyber-attack demands $70m in Bitcoin - Community","isPartOf":{"@id":"https:\/\/www.tsfactory.com\/forums\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#primaryimage"},"image":{"@id":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#primaryimage"},"thumbnailUrl":"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2020\/07\/black-macbook-pro-2473183.jpg","datePublished":"2021-07-08T06:04:44+00:00","dateModified":"2021-07-08T06:05:21+00:00","author":{"@id":"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f"},"breadcrumb":{"@id":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#primaryimage","url":"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2020\/07\/black-macbook-pro-2473183.jpg","contentUrl":"https:\/\/www.tsfactory.com\/forums\/wp-content\/uploads\/2020\/07\/black-macbook-pro-2473183.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/www.tsfactory.com\/forums\/blog\/gang-behind-huge-cyber-attack-demands-70m-in-bitcoin\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.tsfactory.com\/forums\/"},{"@type":"ListItem","position":2,"name":"Gang behind huge cyber-attack demands $70m in Bitcoin"}]},{"@type":"WebSite","@id":"https:\/\/www.tsfactory.com\/forums\/#website","url":"https:\/\/www.tsfactory.com\/forums\/","name":"Community","description":"TSFactory","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.tsfactory.com\/forums\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f","name":"Chelsie Wyatt","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tsfactory.com\/forums\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g","caption":"Chelsie Wyatt"},"url":"https:\/\/www.tsfactory.com\/forums\/blog\/author\/chelsie\/"}]}},"_links":{"self":[{"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/posts\/648","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/comments?post=648"}],"version-history":[{"count":2,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/posts\/648\/revisions"}],"predecessor-version":[{"id":650,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/posts\/648\/revisions\/650"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/media\/256"}],"wp:attachment":[{"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/media?parent=648"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/categories?post=648"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/wp-json\/wp\/v2\/tags?post=648"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}