Report: Managed Service Providers Are New Frontier of Ransomware Attacks

Report: Managed Service Providers Are New Frontier of Ransomware Attacks

Hackers are targeting IT service providers as a means of attacking dozens of organizations at once and potentially reaping bigger financial rewards.

Hackers are increasingly finding ways to target several organizations at once through attacking managed service providers (MSPs) that often provide IT services to small businesses.

Several recent attacks targeted MSPs, including malware that paralyzed hundreds of dental clinics and an incident that temporarily affected services in 22 Texas cities and towns. The providers are widely used because local governments, clinics and other small organizations do not want to take on the cost of hiring their own IT staff and therefore outsource their needs to contractors.

In turn, cybercriminals can target one service provider, particularly smaller ones with fewer resources and employees, and potentially reap the financial benefits from dozens of small businesses in one attack. ProPublica recently reported on the phenomenon as ransomware attacks continue to rise and have severe consequences for organizations.

Read more: Multitude of Ransomware Attacks Cause Lawmakers to Take Notice

Hackers have largely preyed on MSPs that have weak passwords or do not use two-factor authentication. ProPublica also found that attackers have exploited issues with “remote monitoring and management” software that businesses and governments had downloaded to install systems updates.

Remote management is often used to install updates and solve users’ problems right on their screens, but can also serve as “golden keys to immediately distribute ransomware,” said Kyle Hanslovan, the CEO of cybersecurity firm Huntress Labs.

“Just like how you’d want to push a patch at lightning speed, it turns out you can push out ransomware at lightning speed as well,” he told ProPublica.

Cyber criminals have leverage over the MSPs because they often serve many companies and government agencies that contain sensitive information and need access to the data as soon as possible. The providers are more likely to pay ransoms because they are often small businesses themselves and cannot handle the influx of needs from dozens of clients that were paralyzed by the attack, according to Chris Bisnett, the chief architect at Huntress.

‘It’s one thing if I have 50 computers that are ransomed and encrypted and I can fix them,” Bisnett said. “There’s no way I have time to go and do thousands of computers all at the same time when I’ve got all these customers calling and saying: ‘Hey, we can’t do any business, we’re losing money. We need to be back right now.’ So the likelihood of the MSP just saying, ‘Oh I can’t deal with this, let me just pay,’ goes up.”

The rapid growth of ransomware attacks does not seem to be slowing down any time soon, particularly as the insurance industry continues to incentivize hackers by paying the ransoms instead of doling out money for data recovery services.

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • Maximizing Your Security Budget This Year

    7 Ways You Can Secure a High-Traffic Commercial Security Gate  

    Your commercial security gate is one of your most powerful tools to keep thieves off your property. Without a security gate, your commercial perimeter security plan is all for nothing. Read Now

  • Making Safety and Security Intrinsic to School Design

    Public anxieties about school safety are escalating across the country. According to a 2023 Gallup report, 44% of parents fear for their child’s physical safety at school, a 10 percentage-point increase since 2019. Unfortunately, these fears are likely to increase if the incidence of school tragedies continues to mount. As a result, school leaders are now charged with two non-negotiable responsibilities. The first, as always, is to ensure kids have what they need to learn, grow, and thrive. Sadly, their second responsibility is to keep the children in their care safe from threats and physical danger. Read Now

  • The Power of a Layered Approach to Safety

    In a perfect world, every school would have an unlimited budget to help secure their schools. In reality, schools must prioritize what budget they have while navigating the complexities surrounding school security and lockdown. Read Now

  • How a Security System Can Enhance Arena Safety and the Fan Experience

    Ensuring guests have both a memorable experience and a safe one is no small feat for your physical security team. Stadiums, ballparks, arenas, and other large event venues are increasingly leveraging new technologies to transform the fan experience and maintain a high level of security. The goal is to preserve the integrity and excitement of the event while enhancing security and remaining “behind the scenes.” Read Now

Featured Cybersecurity

Webinars

New Products

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation. 3

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure. 3

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction. 3