Spammers posing as software vendor Kaseya are waging a malspam campaign to target users of the company’s VSA remote IT management software that was hit by a ransomware attack. The campaign may be designed to conduct reconnaissance or launch isolated, follow-up attacks, researchers say. Malwarebytes says the campaign is “a classic example of an opportunistic attack conducted by (potentially) another threat actor/group off the back of another attack” The vendor warns users not to click any links or download any attachments in emails claiming to be a “Kaseya advisory””]
Source: https://www.govinfosecurity.com/malspam-campaign-targets-kaseya-victims-a-17019