“tl;dr REvil popped @KaseyaCorp. Abused Kaseya's auto update to conduct supply chain attack that DLL side loads Windows Defender binaries and ransoms the customer
tl;dr tl;dr REvil just pulled off a colossal ransomware supply chain attack” @vxunderground
Thread includes samples.
https://twitter.com/vxunderground/status/1411058433558786049...