Kaseya uses a mysterious decryption tool to restore data stolen from a ransomware attack
The IT software program supplier Kaseya has introduced that it’s going to provide its prospects a decryption tool to restore buyer data that was blocked by a ransomware attack earlier this month.
In a July 26 announcement on its web site, the worldwide expertise firm stated it’s working with cybersecurity agency Emsisoft to assist prospects get well their encrypted data.
It has launched a mysterious “decryption” tool that offers prospects entry to data that was locked by the favored malware within the July 2nd attack.
“The decryption engine has been shown to be 100% effective at decrypting files that were fully encrypted in the attack.”
The firm refused to pay $ 70 million in Bitcoin to the Russian hacker group REvil, which assumed accountability for the attack. Kaseya additionally did not reveal the way it got here throughout the decryption software program, simply saying it did not pay a ransom to get it.
Confirming that after consulting with specialists, Kaseya determined not to negotiate with the criminals accountable for the attack, stating:
“We confirm without any certainty that Kaseya did not pay the ransom, either directly or indirectly through a third party, to obtain the decryptor.”
On July 2, the REvil ransomware attack group introduced the networks of no less than 200 US firms to their knees by exploiting an unpatched zero-day vulnerability in Kaseya’s IT administration and automation software program (VSA).
Related: Don’t blame cryptocurrency for ransomware
The information comes as ransomware comes underneath rising scrutiny by lawmakers.
As Cointelegraph reported on July 9, the appointment of Michele Korver to the U.S. Financial Crimes Enforcement Network (FinCEN) guarantees to scale back unlawful monetary exercise within the crypto house. During her earlier tenure within the Justice Department, she developed insurance policies and legal guidelines governing the seizure and confiscation of cryptocurrencies.
US senators and politicians have spoken out strongly in opposition to the cryptocurrency sector, blaming the technological phenomenon primarily for the rising ransomware assaults. Following the assaults by Colonial Pipeline and JBS in May and June, the US Senate known as for a crackdown on cryptocurrencies after the hackers described digital property as a “payment option”.
Meatpacker JBS paid a $ 11 million bitcoin ransom to REvil, whereas Colonial made a $ 4.4 million BTC cost to Russia-affiliated DarkSide.