Kaseya, 범용 Sodinokibi 랜섬웨어 복호화 툴 획득

출처 : https://www.bleepingcomputer.com/news/security/kaseya-obtains-universal-decryptor-for-revil-ransomware-victims/

Kaseya obtains universal decryptor for REvil ransomware victims

Kaseya received a universal decryptor that allows victims of the July 2nd REvil ransomware attack to ...

BleepingComputer - Lawrence Abrams / 2021-07-23

 

Kaseya가 Sodinokibi 랜섬웨어 공격의 피해자가 무료로 파일을 복구할 수 있는 범용 복호화 툴을 받은 것으로 알려졌다. 

Kaseya는 '신뢰할 수 있는 제3자'로부터 랜섬웨어 공격에 대한 범용 복호화 툴을 받았으며, 현재 영향을 받는 고객에게 배포하고 있다고 밝혔다. Bleeping Computer 측에서 복호화 툴의 출처를 물었으나 제3자에 의해 검증된 툴이라고만 설명할 뿐 구체적인 정보는 얻을 수 없었다. 또한 Soninokibi 랜섬웨어 운영자에게 랜섬머니를 지불했는지 묻는 질문에도 확실한 답변을 주지 않았다. Sodinokibi 랜섬웨어 그룹이 사라진 후 Kaseya가 복호화 툴을 획득한 만큼 러시아가 랜섬웨어 그룹으로부터 직접 이를 받아 미국 법 집행부에 공유했을 가능성이 대두되고 있다.