Page 13 - Malwarebytes Labs News Today : Breaking News, Live Updates & Top Stories | Vimarsana

As fake updates target victims, Kaseya allegedly knew of exploited vulnerability in April SHARE Users of software from Kaseya Ltd. are being targeted with fake updates following an attack by the REvil ransomware group, as it was revealed today that the company was allegedly informed of a vulnerability exploited in a ransomware attack by REvil in April. Detected by researchers at Malwarebytes Labs, the campaign targets potential victims with spam that pushes Cobalt Strike payloads disguised as Kaseya VSA security updates. Cobalt Strike is penetration testing software with legitimate uses but can also be used by bad actors to attack a company. As noted in November, when the source code for software allegedly leaked, in the hands of hackers the software can be used to identify security issues that can be exploited.

White houseDistrict of columbiaUnited statesFrank breedijkAndy jassyKaseya revilMichael dellPat gelsingerMalwarebytes kaseyaCube clubDutch institute for vulnerability disclosureAmazon web servicesMicrosoft corpCube event communityKaseya ltdMalwarebytes labs