{"id":222385,"date":"2022-12-30T12:18:00","date_gmt":"2022-12-30T09:18:00","guid":{"rendered":"https:\/\/geek.mediadoma.com\/?p=222385"},"modified":"2022-12-30T12:18:49","modified_gmt":"2022-12-30T09:18:49","slug":"ett-av-de-mest-produktiva-ransomware-virusen-kan-nu-enkelt-laasas-upp","status":"publish","type":"post","link":"https:\/\/geek.mediadoma.com\/sv\/ett-av-de-mest-produktiva-ransomware-virusen-kan-nu-enkelt-laasas-upp\/","title":{"rendered":"Ett av de mest produktiva Ransomware-virusen kan nu enkelt l\u00e5sas upp"},"content":{"rendered":"<p><a href=\"https:\/\/www.shutterstock.com\/image-photo\/new-york-usa-26-april-2021-1968890518\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">Postmodern Studio\/Shutterstock.com<\/a><\/p>\n<p>Kaseya, ett mjukvaruf\u00f6retag f\u00f6r IT-hantering, s\u00e4ger att det har erh\u00e5llit REvils universella dekrypteringsnyckel genom en &quot; <a href=\"https:\/\/www.theguardian.com\/technology\/2021\/jul\/22\/ransomware-attack-kaseya-key-hacking\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">betrodd tredje part<\/a> .&quot; Detta b\u00f6r hj\u00e4lpa Kaseya att \u00e5terst\u00e4lla data fr\u00e5n en <a href=\"https:\/\/geek.mediadoma.com\/sv\/kaseya-ransomware-paaverkade-1-500-foeretag-bad-om-70-miljoner-dollar\/\" title=\"REvil ransomware-attack\">REvil ransomware-attack<\/a> den 4 juli som p\u00e5verkade \u00f6ver 1 500 f\u00f6retag.<\/p>\n<p>REvil \u00e4r en av flera ransomware-grupper som verkar fr\u00e5n \u00d6steuropa. Det genomf\u00f6rde en ransomware-attack i leveranskedjan p\u00e5 Kaseya genom att utnyttja en s\u00e5rbarhet i f\u00f6retagets VSA-produkt \u2013 en plattform som Kaseya anv\u00e4nder f\u00f6r att distribuera programvara till sina kunder. Kaseya h\u00e4vdar att det var dagar kvar att korrigera denna s\u00e5rbarhet n\u00e4r hacket intr\u00e4ffade.<\/p>\n<p>I slut\u00e4ndan p\u00e5verkade REvils ransomware 60 av Kaseyas kunder och \u00f6ver 1 500 nedstr\u00f6msn\u00e4tverk. Ransomware-gruppen kr\u00e4vde 70 miljoner dollar i utbyte mot ett universellt dekrypteringsverktyg, \u00e4ven om Kaseya hittills undvikit en s\u00e5dan aff\u00e4r.<\/p>\n<p>S\u00e5 hur fick Kaseya den universella dekrypteringsnyckeln REvil? Det \u00e4r m\u00f6jligt, men osannolikt, att IT-f\u00f6retaget gav \u00f6ver 70 miljoner dollar till REvil-gruppen. En mer rimlig f\u00f6rklaring \u00e4r att REvil eller en tredje part, m\u00f6jligen Vita huset eller Kreml, \u00f6verl\u00e4mnade nyckeln till Kaseya gratis.<\/p>\n<p>Naturligtvis \u00e4r detta bara spekulationer. Men flera av REvils m\u00f6rka webbplatser <a href=\"https:\/\/www.cnbc.com\/2021\/07\/13\/multiple-revil-ransomware-sites-are-down-on-the-darkweb-.html\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">f\u00f6rsvann f\u00f6rra veckan<\/a> efter ett telefonsamtal mellan president Biden och Vladimir Putin. P\u00e5 en <a href=\"https:\/\/www.cnbc.com\/2021\/07\/09\/ransomware-biden-presses-putin-to-disrupt-cybercriminals-in-russia.html\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">presskonferens<\/a> fredagen den 9 juli h\u00e4vdade presidenten att han &quot;gjorde det mycket tydligt f\u00f6r [Putin] att USA f\u00f6rv\u00e4ntar sig, n\u00e4r en ransomware-operation kommer fr\u00e5n deras mark, \u00e4ven om den inte, inte, sponsras av staten, att vi f\u00f6rv\u00e4ntar oss att de agerar.&quot;<\/p>\n<p>Presidenten bekr\u00e4ftade ocks\u00e5 att det skulle f\u00e5 konsekvenser f\u00f6r framtida attacker, och att USA har r\u00e4tt att rikta in sig p\u00e5 servrar som \u00e4r v\u00e4rd f\u00f6r ransomware-operationer.<\/p>\n<p>Oavsett hur Kaseya fick tag p\u00e5 REvil-dekrypteringsprogrammet kan programvaruf\u00f6retaget nu l\u00e5sa upp data som f\u00f6retag f\u00f6rlorade i ransomware-attacken den 4 juli (och andra REvil-attacker). F\u00f6rhoppningsvis kommer detta genombrott att minska antalet ransomware-attacker som intr\u00e4ffar i framtiden.<\/p>\n<p>K\u00e4lla: <a href=\"https:\/\/www.theguardian.com\/technology\/2021\/jul\/22\/ransomware-attack-kaseya-key-hacking\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">The Guardian<\/a> via <a href=\"https:\/\/www.zdnet.com\/article\/kaseya-says-it-has-now-got-the-revil-ransomware-decryption-key-and-it-works\/\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">ZDNet<\/a><\/p>\n<p><div id=\"PostUnique_PostSource\" style=\"padding-top: 50px\">Inspelningsk\u00e4lla:  <a target=\"_blank\" rel=\"noopener nofollow\" href=\"\/\/www.reviewgeek.com\" class=\"external external_icon\">www.reviewgeek.com<\/a><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kaseya, ett mjukvaruf\u00f6retag f\u00f6r IT-hantering, s\u00e4ger att det har erh\u00e5llit REvil universella dekrypteringsnyckel genom en &#8221;p\u00e5litlig tredje part.&#8221; Detta borde hj\u00e4lpa Kaseya att \u00e5terst\u00e4lla data fr\u00e5n en REvil ransomware-attack den 4 juli som p\u00e5verkade \u00f6ver 1 500 f\u00f6retag.<\/p>\n","protected":false},"author":1,"featured_media":156617,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wp_rev_ctl_limit":""},"categories":[741,626,741,656,686,730,730,759,759],"tags":[],"class_list":{"0":"post-222385","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","6":"hentry","7":"category-diverse","8":"category-applikationer","10":"category-hobbyer","11":"category-genomfoerbar-livskraftig","12":"category-nyheter","14":"category-sakerhet"},"_links":{"self":[{"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/posts\/222385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/comments?post=222385"}],"version-history":[{"count":0,"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/posts\/222385\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/media\/156617"}],"wp:attachment":[{"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/media?parent=222385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/categories?post=222385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geek.mediadoma.com\/sv\/wp-json\/wp\/v2\/tags?post=222385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}