Kaseya gets decryptor for REvil ransomware from unknown party – Computer – News

On Wednesday, Kaseya received a decryptor from an unnamed third party that can decrypt files affected by REvil’s ransomware attack. The company now says it is helping customers recover their systems with the tool.

The decryption tool is according to Kaseya tested by cybersecurity firm Emsisoft, which confirms that the tool works. No problems would have arisen by using the tool. Kaseya will work with teams to actively help customers recover their systems and say they are contacting affected customers now.

How Kaseya got the decryptor is not clear; the company doesn’t give any details about that. REvil offered to sell the tool for 42 million euros, although the group’s website has been offline since last week.

The supply chain attack on Kaseya started earlier this month and affected more than a thousand companies. One of the victims was the Swedish supermarket chain Coop, which half of its eight hundred stores had to close as a result of the cyber attack. Kaseya makes software for managed service providers; companies that do IT management for other, smaller organizations. Tweakers previously wrote a background article about the Kaseya attack.

–