Kaseya VSA Supply-Chain Ransomware Advisory

Zscaler ThreatLabz describes a July 2021 Kaseya VSA supply-chain ransomware incident in which attackers likely exploited a zero-day in the on-prem VSA to distribute a malicious update that dropped a loader and deployed REvil/Sodinokibi, impacting many MSPs and over 1,000 downstream businesses; the advisory details the attack chain, suggested mitigations, and Zscaler detection and sandbox coverage.