MSP Customers Hit by Ransomware Attack 2019-02-08

Well, we knew this was possible. DarkReading reports that between 1,500 and 2,000 endpoint systems and servers were hit by a Gandcrab ransomware attack this week. The managed service provider is reported to be U.S. based. The attack vector was a vulnerable MSP plug-in used for remote monitoring and management. The ransom amount demanded?  USD $2.6 million. The article's quote from Huntress Labs Chief Architect Chris Bennet sums it up, and stands as clarion call to both MSPs, their customers: "From the MSP's standpoint, the tool they use to manage everything was just used against them" to inflict damage on customers...Everyone is looking at the attack and saying, 'This could have been me.'" It will be interesting to see how the MSP customer's insurance (cyber and otherwise) deal with claims. Hint: Was a nation-state responsible?



Link to article: https://ubm.io/2BuKxS9