Kaseya Ransomware Supply-Chain Attack: What We Know So Far

On 02 July 2021 a sophisticated supply-chain ransomware attack exploited an apparent zero-day in Kaseya VSA to distribute REvil (Sodinokibi) ransomware via malicious product updates, impacting managed service providers and their customers; the report outlines the attack stages, ransom demands (including a universal decryptor offer and Monero payment requests), attribution to REvil RaaS affiliates, and provides detection queries and mitigation guidance.