Associated Press: Inside the sophisticated cyberattack that had Texas communities struggling for days

Associated Press: Inside the sophisticated cyberattack that had Texas communities struggling for days. “In 2019, ransomware had yet to emerge as one of the top national security concerns confronting the United States, an issue that would become the focus of a presidential summit between Washington and Moscow this year. But the attacks in Texas were a harbinger of the now-exploding threat and offer a vivid case study in what happens behind the scenes when small-town America comes under attack.”

CNN: Software company’s unveiling of decryption key comes too late for many victims of devastating ransomware attack

CNN: Software company’s unveiling of decryption key comes too late for many victims of devastating ransomware attack. “On Thursday, the software company Kaseya announced that it could help unlock any of its customers’ systems that were still inaccessible following a devastating ransomware attack early this month that took down as many as 1,500 businesses worldwide. But for many victims it was too little, too late.”

Department of Justice: U.S. Government Launches First One-Stop Ransomware Resource at StopRansomware. gov

Department of Justice: U.S. Government Launches First One-Stop Ransomware Resource at StopRansomware.gov. “The U.S. Department of Justice (DOJ) and the U.S. Department of Homeland Security (DHS), together with federal partners, have launched a new website to combat the threat of ransomware. StopRansomware.gov establishes a one-stop hub for ransomware resources for individuals, businesses and other organizations. The new StopRansomware.gov is a collaborative effort across the federal government and is the first joint website created to help private and public organizations mitigate their ransomware risk.”

Gizmodo: This Crowdsourced Ransomware Payment Tracker Shows How Much Cybercriminals Have Heisted

Gizmodo: This Crowdsourced Ransomware Payment Tracker Shows How Much Cybercriminals Have Heisted. “The way it works is Ransomwhere keeps a running tally of ransoms paid out to cybercriminals in the bitcoin cryptocurrency. This is largely made possible because of the transparent nature of bitcoin: All transactions involving the cryptocurrency are recorded on the blockchain, a decentralized database that acts as a public ledger, thus allowing anyone to track any transactions specifically associated with ransomware groups.”

Engadget: Kaseya was warned about security flaws years ahead of ransomware attack

Engadget: Kaseya was warned about security flaws years ahead of ransomware attack. “The giant ransomware attack against Kaseya might have been entirely avoidable. Former staff talking to Bloomberg claim they warned executives of ‘critical’ security flaws in Kaseya’s products several times between 2017 and 2020, but that the company didn’t truly address them. Multiple staff either quit or said they were fired over inaction.”

AP: In crosshairs of ransomware crooks, cyber insurers struggle

AP: In crosshairs of ransomware crooks, cyber insurers struggle. “Before ransomware evolved into a full-scale global epidemic plaguing businesses, hospitals, schools and local governments, cyber insurance was a profitable niche industry. It was accused of fueling the criminal feeding frenzy by routinely recommending that victims pay up, but kept many from going bankrupt. Now, the sector isn’t just in the criminals’ crosshairs. It’s teetering on the edge of profitability, upended by a more than 400% rise last year in ransomware cases and skyrocketing extortion demands. As a percentage of premiums collected, cyber insurance payouts now top 70%, the break-even point.”

Bleeping Computer: REvil ransomware hits 200 companies in MSP supply-chain attack

Bleeping Computer: REvil ransomware hits 200 companies in MSP supply-chain attack. “A massive REvil ransomware attack affects multiple managed service providers and their clients through a reported Kaseya supply-chain attack. Starting this afternoon, the REvil ransomware gang targeted approximately six large MSPs, with thousands of customers, through what appears to be a Kaseya VSA supply-chain attack.”

The Verge: Ransom Notes

The Verge: Ransom Notes. “Major cybercrime gang Evil Corp — great branding btw — reportedly likes sick Lambos. Stopping ransomware is simple in that way: all you have to do is cut off the cash. The question is how, and none of the choices are very good.”

The Record: Hacker wipes database of NewsBlur RSS reader

The Record: Hacker wipes database of NewsBlur RSS reader. “A hacker has wiped the database of NewsBlur, a popular web-based RSS reader, and demanded a ransom payment from the company in exchange for access to its original data. The incident, which took place earlier today, has already been resolved after the NewsBlur staff restored to a previous backup they had on hand by chance.”