Kaseya vulnerabilities
02 July 2021On Friday, July 2 around 18:00 Dutch time it became clear that Kaseya remote management software was dealing with a ransomware infection.
Later that weekend it became clear that systems of many companies worldwide were affected by this ransomware.
Infracom, like about 40,000 other IT companies worldwide, also uses this software, in our case to manage Windows systems. Based on information from Kaseya, we immediately took steps on Friday evening to safeguard the security of systems of our customers and ourselves. At this moment, we have no reason to assume that systems of our customers or ourselves have actually been affected by this vulnerability.
Shut down
The recommended action to shut down Kaseya until there is a solution was already performed by us on Friday evening. You do not need to do this on your own equipment unless you or another system administrator than us has installed Kaseya (we have no control over these installations).
If you think your systems have been affected by this attack, then it is wise to shut down these systems if possible and report to us via 088-2009000 or support@infracom.nl
Alert
We continue to closely follow instructions from Kaseya and are also vigilant ourselves to prevent damage to systems or data of our customers or ourselves. You can continue to use the systems unless there is a direct reason to think that the systems have been affected. In that case, take actions as described above.