The latest ransomware outbreak is thought to be the work of the Russia-linked REvil ransomware gang, the same group of hackers suspected by the FBI for paralyzing meat packer JBS last month.
An exceptionally sophisticated ransomware attack that hijacked widely used technology management software from a Miami-based supplier called Kaseya affected hundreds of American firms on Friday.
The attackers modified a Kaseya tool known as VSA, which is used by organisations that manage technology for small businesses. The attackers then encrypted the files of the consumers of those providers at the same time.
Huntress, a security firm, said it was tracking eight managed service providers that had infected 200 clients.
On its website, Kaseya stated that it was looking into a “potential attack” on VSA, which is used by IT professionals to manage servers, desktops, network devices, and printers.
It reported that it was responding by shutting down some of its infrastructure and advising clients who used VSA on their premises to turn down their servers immediately.