DevOps Articles

How Did Kaseya Get Hacked? | UpGuard

The Kasya ransomware attack occurred through the exploitation of https://nvd.nist.gov/vuln/detail/CVE-2021-30116, an authentication bypass vulnerability within Kaseya VSA servers. This allowed the hackers to circumvent authentication controls and executive commands via SQL injection, giving them all the control they needed to deploy their ransomware payload and encrypt a segment of Kaseya's internal data.

Who was Responsible for the Kaseya Ransomware Attack?

Your business could avoid falling victim to a security incident similar to the Kaseya Ransomware attack by adjusting your cybersecurity efforts to the following key learnings.

Phase 1 - Phishing Attack Phase 2 - Victim Interaction Phase 3 - Account Compromise Phase 4 - Privilege Escalation Phase 5 - Lateral Movement Phase 6 - Data Exfiltration Phase 7 - Data Encryption Phase 8 - Data Dump