IT Management Platform Kaseya Hit With Sodinokibi REvil Ransomware Attack
Tags
country: Argentina Belgium Netherlands Laos Moldova Trinidad And Tobago Uzbekistan Romania Russia Syria Togo Tokelau
attack-pattern: Data Dll Side-Loading - T1574.002 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Dll Side-Loading - T1073 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 3fb28cef-3331-49a0-a770-8f816f385bcb
Fingerprint 8727b8d8c412af0b
Analysis status DONE
Considered CTI value 0
Text language
Published July 4, 2021, midnight
Added to db Oct. 15, 2024, 3:48 p.m.
Last updated Nov. 12, 2024, 6:45 p.m.
Headline IT Management Platform Kaseya Hit With Sodinokibi/REvil Ransomware Attack
Title IT Management Platform Kaseya Hit With Sodinokibi REvil Ransomware Attack
Detected Hints/Tags/Attributes 54/2/5
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_au/research/21/g/it-management-platform-kaseya-hit-with-sodinokibi-revil-ransomwa.html
Details Source https://www.trendmicro.com/en_sg/research/21/g/it-management-platform-kaseya-hit-with-sodinokibi-revil-ransomwa.html
Details Source https://www.trendmicro.com/en_in/research/21/g/it-management-platform-kaseya-hit-with-sodinokibi-revil-ransomwa.html
Details Source https://www.trendmicro.com/en_my/research/21/g/it-management-platform-kaseya-hit-with-sodinokibi-revil-ransomwa.html
Details Source https://www.trendmicro.com/en_nz/research/21/g/it-management-platform-kaseya-hit-with-sodinokibi-revil-ransomwa.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details CVE 26 
cve-2021-30116
Details File 48 
agent.exe
Details File 41 
mpsvc.dll
Details File 13 
agent.crt
Details sha256 8 
e2a24ab94f865caeacdf2c3ad015f31f23008ac6db8312c2cbfb32e4a5466ea2