As a security leader, you need to be aware of the potential cyber risks that arise every time an external party is granted privileged access to your systems. eSentire helps assess your third-party cyber risk and offers 24/7 support for rapid threat detection, threat hunting and complete threat containment in minutes, before your business is disrupted.

eSentire observed an unknown threat actor attempting to deploy Monero cryptocurrency mining malware to multiple customers. This increasingly common type of attack known as “cryptojacking” allows a hacker to leverage the computing power of devices to mine cryptocurrencies, unbeknownst to the victim.

Following an investigation from eSentire’s SOC, it was determined that the threat actor was leveraging a zero-day vulnerability in Kaseya’s Virtual Systems Administrator (VSA) agent to gain access to the clients’ network.

Read this case study to learn how eSentire remediated the attack.

Watch this video with one of eSentire’s Elite Threat Hunters, Spence Hutchinson, as he reviews the Kaseya VSA supply chain attacks. Spence outlines how eSentire’s Security Operations Center (SOC) and Threat Response Unit (TRU) were able to quickly respond on our customer’s behalf and notify Kaseya of the breaches.

Modern Threat Response

In these attacks, threat actors leveraged zero-day vulnerabilities to push Cryptomining malware and ransomware to Kaseya VSA customers. Our proprietary BlueSteel Machine Learning Engine identified malicious Powershell commands being executed. eSentire’s actions to detect, respond and remediate these attacks demonstrate the importance of MDR services that go beyond alerting and host isolation to deliver complete & robust response.