Red Canary Thwarts Kaseya Supply Chain Ransomware Attack Over Holiday Weekend
Red Canary's behavior-based detections allow organizations like Unitus Community Credit Union to block the REvil ransomware attack before it causes disruption, even when third-party vendors are compromised.
REvil ransomware operators exploit zero-day vulnerabilities in Kaseya's IT management software on July 2, 2021, just before the Independence Day holiday. While many security teams scramble to assess the damage and cancel their holiday plans, Red Canary customers experience zero business disruption thanks to early threat detection.
Unitus Community Credit Union faces significant risk because a third-party phone vendor uses the compromised Kaseya software. Red Canary identifies the indicators of compromise and proactively alerts Unitus Information Security Analyst Harlan Hoult long before the attack makes mainstream news headlines.
Red Canary Principal Threat Hunter Paul Michaud connects the dots between similar domains across different customers to quickly determine that Unitus's vendor is compromised. This swift behavior-based detection and immediate communication allow Unitus to contain the threat and enjoy the holiday weekend without falling victim to ransomware.