麻豆影视

Business

    • Ransomware attack before U.S. holiday leaves companies scrambling

    (Soumil Kumar / Pexels.com) (Soumil Kumar / Pexels.com)
    Share
    WASHINGTON -

    Businesses around the world rushed Saturday to contain a ransomware attack that has paralyzed their computer networks, a situation complicated in the U.S. by offices lightly staffed at the start of the Fourth of July holiday weekend.

    It's not yet known how many organizations have been hit by demands that they pay a ransom in order to get their systems working again. But some cybersecurity researchers predict the attack targeting customers of software supplier Kaseya could be one of the broadest ransomware attacks on record.

    It follows a scourge of headline-grabbing attacks over recent months that have been a source of diplomatic tension between U.S. President Joe Biden and Russian President Vladimir Putin over whether Russia has become a safe haven for cybercriminal gangs.

    Biden said Saturday he didn't yet know for certain who was responsible but suggested that the U.S. would respond if Russia was found to have anything to do with it.

    "If it is either with the knowledge of and or a consequence of Russia then I told Putin we will respond," Biden said. "We're not certain. The initial thinking was it was not the Russian government."

    Cybersecurity experts say the REvil gang, a major Russian-speaking ransomware syndicate, appears to be behind the attack that targeted the software company Kaseya, using its network-management package as a conduit to spread the ransomware through cloud-service providers.

    "The number of victims here is already over a thousand and will likely reach into the tens of thousands," said cybersecurity expert Dmitri Alperovitch of the Silverado Policy Accelerator think tank. "No other ransomware campaign comes even close in terms of impact."

    The cybersecurity firm ESET says there are victims in least 17 countries, including the United Kingdom, South Africa, Canada, Argentina, Mexico, Kenya and Germany.

    In Sweden, most of the grocery chain Coop's 800 stores were unable to open because their cash registers weren't working, according to SVT, the country's public broadcaster. The Swedish State Railways and a major local pharmacy chain were also affected.

    Kaseya CEO Fred Voccola said in a statement that the company believes it has identified the source of the vulnerability and will "release that patch as quickly as possible to get our customers back up and running."

    Voccola said fewer than 40 of Kaseya's customers were known to be affected, but experts said the ransomware could still be affecting hundreds more companies that rely on Kaseya's clients that provide broader IT services.

    John Hammond of the security firm Huntress Labs said he was aware of a number of managed-services providers -- companies that host IT infrastructure for multiple customers -- being hit by the ransomware, which encrypts networks until the victims pay off attackers.

    "It's reasonable to think this could potentially be impacting thousands of small businesses," said Hammond, basing his estimate on the service providers reaching out to his company for assistance and comments on Reddit showing how others are responding.

    At least some victims appeared to be getting ransoms set at US$45,000, considered a small demand but one that could quickly add up when sought from thousands of victims, said Brett Callow, a ransomware expert at the cybersecurity firm Emsisoft.

    Callow said it's not uncommon for sophisticated ransomware gangs to perform an audit after stealing a victim's financial records to see what they can really pay, but that won't be possible when there are so many victims to negotiate with.

    "They just pitched the demand amount at a level most companies will be willing to pay," he said.

    Voccola said the problem is only affecting its "on-premise" customers, which means organizations running their own data centers. It's not affecting its cloud-based services running software for customers, though Kaseya also shut down those servers as a precaution, he said.

    The company added in a statement Saturday that "customers who experienced ransomware and receive a communication from the attackers should not click on any links -- they may be weaponized."

    Gartner analyst Katell Thielemann said it's clear that Kaseya quickly sprang to action, but it's less clear whether their affected clients had the same level of preparedness.

    "They reacted with an abundance of caution," she said. "But the reality of this event is it was architected for maximum impact, combining a supply chain attack with a ransomware attack."

    Supply chain attacks are those that typically infiltrate widely used software and spread malware as it updates automatically.

    Complicating the response is that it happened at the start of a major holiday weekend in the U.S., when most corporate IT teams aren't fully staffed.

    That could also leave those organizations unable to address other security vulnerabilities, such a dangerous Microsoft bug affecting software for print jobs, said James Shank, of threat intelligence firm Team Cymru.

    "Customers of Kaseya are in the worst possible situation," he said. "They're racing against time to get the updates out on other critical bugs."

    Shank said "it's reasonable to think that the timing was planned" by hackers for the holiday.

    The U.S. Chamber of Commerce said it was affecting hundreds of businesses and was "another reminder that the U.S. government must take the fight to these foreign cybercriminal syndicates" by investigating, disrupting and prosecuting them.

    The federal Cybersecurity and Infrastructure Security Agency said in a statement that it is closely monitoring the situation and working with the FBI to collect more information about its impact.

    CISA urged anyone who might be affected to "follow Kaseya's guidance to shut down VSA servers immediately." Kaseya runs what's called a virtual system administrator, or VSA, that's used to remotely manage and monitor a customer's network.

    The privately held Kaseya is based in Dublin, Ireland, with a U.S. headquarters in Miami.

    REvil, the group most experts have tied to the attack, was the same ransomware provider that the FBI linked to an attack on JBS SA, a major global meat processor forced to pay a $11 million ransom, amid the Memorial Day holiday weekend in May.

    Active since April 2019, the group provides ransomware-as-a-service, meaning it develops the network-paralyzing software and leases it to so-called affiliates who infect targets and earn the lion's share of ransoms.

    U.S. officials have said the most potent ransomware gangs are based in Russia and allied states and operate with Kremlin tolerance and sometimes collude with Russian security services.

    Alperovitch said he believes the latest attack is financially motivated and not Kremlin-directed.

    However, he said it shows that Putin "has not yet moved" on shutting down cybercriminals within Russia after Biden pressed him to do so at their June summit in Switzerland.

    Asked about the attack during a trip to Michigan on Saturday, Biden said he had asked the intelligence community for a "deep dive" on what happened. He said he expected to know more by Sunday.

    ------

    AP reporters Frank Bajak in Boston, Eric Tucker in Washington and Josh Boak in Central Lake, Michigan contributed to this report.

    CTVNews.ca Top Stories

    Two nephews of the beloved Harry R. Hamilton share stories about his life and legacy.

    The union representing some 1,200 dockworkers at the Port of Montreal has overwhelmingly rejected a deal with their employers association.

    Canada

    • A team of tornado experts is heading to Fergus, Ont. after a storm ripped through the area Sunday night.

    • Two nephews of the beloved Harry R. Hamilton share stories about his life and legacy.

    • The union representing some 1,200 dockworkers at the Port of Montreal has overwhelmingly rejected a deal with their employers association.

    • A man who was critically injured in a police-involved shooting in Hamilton late Sunday afternoon has died in hospital, says the province鈥檚 police watchdog.

    World

    Politics

    • Murray Sinclair鈥檚 family members say the late justice and senator has been laid to rest according to his wishes.

    • Prime Minister Justin Trudeau announced voters in Cloverdale鈥擫angley City will pick their next member of Parliament on Dec. 16.

    Health

    Sci-Tech

    Entertainment

    Business

    Lifestyle

    Sports

    Autos

    Local Spotlight

    For the second year in a row, the 鈥楪ift-a-Family鈥 campaign is hoping to make the holidays happier for children and families in need throughout Barrie.

    Some of the most prolific photographers behind CTV Skywatch Pics of the Day use the medium for fun, therapy, and connection.

    A young family from Codroy Valley, N.L., is happy to be on land and resting with their newborn daughter, Miley, after an overwhelming, yet exciting experience at sea.

    As Connor Nijsse prepared to remove some old drywall during his garage renovation, he feared the worst.

    A group of women in Chester, N.S., has been busy on the weekends making quilts 鈥 not for themselves, but for those in need.

    A Vancouver artist whose streetside singing led to a chance encounter with one of the world's biggest musicians is encouraging aspiring performers to try their hand at busking.

    Ten-thousand hand-knit poppies were taken from the Sanctuary Arts Centre and displayed on the fence surrounding the Dartmouth Cenotaph on Monday.

    A Vancouver man is saying goodbye to his nine-to-five and embarking on a road trip from the Canadian Arctic to Antarctica.

    • Thousands of people are expected to gather in downtown Vancouver on Monday to observe the city鈥檚 100th Remembrance Day ceremony.

    • Weather watchers were treated to an exceptionally rare display on Friday evening as rare cloud formations filled Vancouver skies.

    • Toronto is expected to see an economic boost to the tune of nearly $300 million thanks to Taylor Swift鈥檚 upcoming Eras Tour, which will be making a stop in Canada鈥檚 largest city for a six-show run later this month.

    • One man was transported to hospital early Monday morning after a stabbing in the northwest end of the city, Toronto police say.

    • Calgarians will be observing Remembrance Day at a number of different ceremonies across the city, including at the Hangar Flight Museum.

    • A home in the northeast Calgary community of Saddle Ridge was damaged in a fire on Sunday.

    • WEATHER

      WEATHER

      Conditions were warm early Monday and expected to remain that way for most of the day.

    • WATCH LIVE

      WATCH LIVE

      CTVNewsOttawa.ca looks at Remembrance Day ceremonies in Ottawa.

    • After months of controversy surrounding a dog park in Ottawa's west end, a solution has been reached to divide the park in half.

    • With fewer interments and rising maintenance fees, the money for Canada's largest military cemetery will run out in three to four years.

    • The employers association at the Port of Montreal locked out nearly 1,200 longshore workers, bringing a halt to traffic at the port.

    • Though most businesses are expected to be open on Remembrance Day, there are some establishments that will be closed to commemorate the holiday.

    • LIVE @ 10:45 A.M. MT

      LIVE @ 10:45 A.M. MT

      Monday is Remembrance Day, a time to honour armed forces members who have died in the line of duty.

    • WEATHER

      WEATHER

      This is shaping up to be one of the warmest Remembrance Days in the past decade, at least, for temperatures.

    • Maritimers will stop Monday to remember those who have served, and continue to serve, in Canada's armed forces for Remembrance Day.

    • A Cape Breton senior recalls her life in German-occupied France, and her mother鈥檚 death, during the Second World War.

    • Thousand of people gathered at the Menin Gate in the Ypres, Belgium for Monday鈥檚 Remembrance Day Ceremony.

    • Remembrance Day is today, and a number of ceremonies are taking place around the province to honour those who gave their lives to serve our country.

    • A pillar in Canada鈥檚 history was honoured in Winnipeg Sunday afternoon, with thousands showing up to pay tribute to the life and legacy of the late Murray Sinclair.

    • Winnipeg police have identified two men involved in a stabbing incident earlier this week.

    • There will be two ceremonies taking place in Regina for Remembrance Day, hosted by the Royal Canadian Legion.

    • Regina author Valerie Crowther is celebrating the release of her book 鈥榃ar Letters: Linking Lives in the Second World War.鈥

    • It was a somber day at Mosaic Stadium as members of the Saskatchewan Roughriders officially cleaned out their stalls and closed the book on the 2024 season.

    • A team of tornado experts is heading to Fergus, Ont. after a storm ripped through the area Sunday night.

    • People across Canada will pause to reflect Monday at Remembrance Day Ceremonies across the country.

    • Saskatchewan RCMP are searching for a suspect after a man was seriously injured in a farm-related incident in Montreal Lake.

    • It was a somber day at Mosaic Stadium as members of the Saskatchewan Roughriders officially cleaned out their stalls and closed the book on the 2024 season.

    • The Regina Rams claimed the Hardy Cup after a hard fought battle against the Saskatoon Huskies 19-14 on Saturday in the first all Saskatchewan U-Sports western conference final since 2002.

    • WATCH LIVE

      WATCH LIVE

      The events will start at 10:15 a.m. with a parade that forms up in front of the Delta London Armories, marches east on Dundas Street and turns north onto Waterloo Street to Dufferin Avenue, the west to the Cenotaph.

    • Emergency crews responded to the scene on Road 68/Highway 2 east of Thamesford around 7 p.m.

    • On Friday, the Sarnia Police Service (SPS) received a report of an alleged abduction in the area of Kathleen Avenue and Walnut Avenue.

    • Environment Canada issued a weather alert for Barrie, Collingwood and surrounding areas, alerting residents about the wicked winds that are expected to pick up to 80 kilometres per hour in the afternoon hours.

    • Barrie residents gathered on Monday to honour Canada鈥檚 veterans and pay tribute to those who served and sacrificed for the country.

    • A driver is facing multiple charges after a multi-vehicle collision on Highway 400 early Sunday morning.

    • WATCH LIVE

      WATCH LIVE

      Representatives of the Windsor Veterans Memorial Services Committee, military representatives, wreath bearers, government officials, and members of the public will attend the Cenotaph at City Hall Square for the outdoor service.

    • One person has been arrested after Chatham-Kent Police Service (CKPS) received multiple complaints about an alleged drunk driver.

    • More details have been released about a police investigation at the Ambassador Bridge that connects Windsor, Ont. and Detroit, MI.

    • Environment Canada says heavy rain and winds could cause power outages on Vancouver Island as an "intense" storm system is set to hit the B.C. coast Sunday.

    • Six deer were struck by vehicles in six different locations in a six-hour period on B.C. highways on Saturday, according to the transportation ministry.

    • The union for locked-out port workers in British Columbia says the BC Maritime Employers Association cut off talks in less than an hour Saturday, refusing to budge on a final offer that the union has so far rejected.

    • The emergency department at South Okanagan General Hospital in Oliver, B.C., will be closed for 31 hours this weekend, the second such closure in a week and the third since the start of November.

    • Police in Kamloops, B.C., are reminding parents and guardians to check their children's Halloween candy after receiving a report of a mother finding a razor blade in one of her daughter's treats.

    • More than two years after Alannah Brown and Douglas Barker were found dead north of Penticton, police are asking for help identifying a vehicle they believe was associated with the crime.

    • The Southern Alberta Recreation Association is officially announcing the Town of Taber as next year鈥檚 host for the Southern Alberta Summer Games.

    • The Lethbridge Hurricanes broke open a close game with three goals in the first two minutes of the third period as they defeated the Warriors 7-3 in a game played Friday night in Moose Jaw.

    • There might not a lot snow just yet, but many southern Albertans are still itching to get outdoors.

    • It was just days before the COVID-19 pandemic shut the world down when the Shaft Bottom Boys of Sudbury broke a world record for 'Deepest Concert Underground.' Now, more than four years later, a Timmins band is looking to take the title.

    • Police have arrested a 15-year-old in connection with a break-in and $50,000 in damage done to the Centennial Arena in Elliot Lake in September.

    • Mayors of the five largest cities in northern Ontario met in North Bay the last two days to discuss a range of critical issues impacting their cities and the region.

    N.L.

    Shopping Trends

    The Shopping Trends team is independent of the journalists at 麻豆影视. We may earn a commission when you use our links to shop.聽Read about us.

    Stay Connected
    Follow 麻豆影视