Blog

I am sure you will have read or seen in the news that a new, recent cyber-attack has taken place, affecting thousands of organisations. The software which was attacked helps managed IT service providers, like Concept IT support and manage systems for their clients. The first thing I must say is that our team doesn’t use Kaseya!

There are only a handful of software providers who produce management systems for IT service providers and even though this attack hasn’t affected Concept IT or any of its clients, we are deeply concerned about the impact this has had on some of our peers and their customers. Systems like these are the glue that enables us to provide support and maintenance services to you.

Russian hacking organisation, REvil, which is responsible for this latest attack, found a weakness in Kasey’s VSA software, which has allowed it to remotely command systems to download and install a crypto locker that demands a ransom fee be paid to restore computer systems, otherwise they remain encrypted and locked – and therefore unable to function. 

This type of attack is known as a “Supply Chain Attack” where, by attacking an organisation higher up the chain, the hacker can access not just that organisation, but their client's clients. Hackers have learned quickly that by attacking a supply chain, they can exercise maximum impact from minimal effort. 

As a managed IT service provider, we have invested significant sums in safeguarding not just our organisation, but also our clients. Our UKAS certified ISO27001 accreditation illustrates the world-class security management systems in which Concept IT operate and the care we take while protecting our customers. 

Even with all of the world-class controls implemented through ISO27001, no organisation can afford to be complacent. Every company must ensure they take all reasonable precautions to protect not just their organisation, but that of their consumers too. 

Cyber Essentials is a brilliant place to start. It’s a minimum standard created by the UK government to help safeguard business and is also held by Concept IT. This very first step is a great leap to defend your organisation against attack, and we encourage every single organisation to adopt this initial standard.

Anti-Virus and firewalls no longer protect you from attacks of this sort and new tools such as EDR, SOC, SEIM and Security Appliances are now required. 

Only you know how important your IT systems are to the operation of your organisation, and for that reason, you should ensure that the people you trust in managing your systems, take the utmost care about their systems too. When looking for an IT service provider to professionally manage your systems, you should always check they hold Cyber Essentials and ISO27001. 

If you would like to find out more about these standards, technologies and how a professional IT services provider can help your organisation, please don’t hesitate to get in touch.