Huntress Investigates Mass MSP Ransomware Incident

Here at Huntress, our team continues to investigate the Kaseya VSA supply chain attack that's currently affecting a growing number of MSPs, resellers and their customers.

Our initial findings and analysis are captured in this Reddit thread. We're continuing to update that thread and this blog with new information. 

We hosted a webinar on Tuesday, July 6 at 1:00 p.m. ET to provide additional information. It was led by Huntress founders and members of our ThreatOps team, where they shared the latest technical analysis, answered questions and offered guidance to help businesses respond to these large-scale ransomware attacks. You can click here to watch on demand. 

If you need assistance—even if you're not a current Huntress partner—please contact our support team at [email protected]. We're working around the clock to support MSPs who have been impacted by this attack.

Author John Hammond is a threat hunter, education enthusiast and senior security researcher at Huntress. Read more Huntress guest blogs here.