A major cyberattack has potentially hit more than 1,000 companies worldwide, forcing a Swedish supermarket chain to shut hundreds of stores.
Hackers are demanding $70 million in bitcoin in exchange for data stolen in the ransomware attack against Miami-based IT company Kaseya.
But what exactly is a ransomware attack, and who is behind this one? Here are some key questions about the attack, which has paralysed businesses since Friday.
How bad is it?
The full scale of this attack remains unclear. Kaseya initially said Friday that it believed only around 40 of its customers had been affected.
But Huntress Labs, a cybersecurity firm working with partners targeted in the attack, has said it believes more than 1,000 companies may have been hit.
Not all of them are Kaseya customers. Swedish supermarket chain Coop, which was forced to close hundreds of stores after the hack pushed its checkouts offline, was affected because its IT subcontractor is linked to Kaseya.
Hackers claiming responsibility for the attack on Happy Blog, a site on the dark web associated with Russian-speaking group REvil, claimed they had infected "more than a million systems".
Why attack Kaseya?
French cybersecurity expert Loic Guezo said that targeting Kaseya, which provides IT solutions for some 40,000 small and medium-sized businesses worldwide, allowed the hackers to strike a huge number of victims with a single blow.
"It's using software that is used by many businesses in order to penetrate their networks," he explained, drawing a parallel with the spectacular attack against software firm SolarWinds last year.
What's a ransomware attack?
Ransomware attacks typically involve locking away companies' or individuals' data using encryption, then making them pay to regain access.
Such digital hostage-taking is increasingly common. Last year alone, at least $18 billion was sent to hackers using ransomware, according to security firm Emsisoft.
Payments are usually demanded in bitcoin, since the cryptocurrency helps perpetrators stay anonymous.
The United States has found itself a particular target of such attacks in recent months, with SolarWinds and the Colonial oil pipeline among high-profile victims.
The FBI has blamed those attacks on Russia-based hackers, and US President Joe Biden raised the issue with his counterpart Vladimir Putin at their summit last month.
Moscow, suspected of turning a blind eye to the hackers or even encouraging them, denies any involvement.
Who's behind the Kaseya attack?
Numerous experts have pointed the finger at a Russian-speaking hacking group known as REvil.
The demand for $70 million was posted on Happy Blog, a site on the dark web previously associated with REvil, who are also known as Sodinokibi.
The FBI believes REvil were also behind last month's attack on global meat processing giant JBS, which ended with the Brazil-based company paying bitcoin worth $11 million to the hackers.
REvil, who first emerged around 2019, work as part of a collective, sometimes sharing both their ransomware and their loot with other hackers who take part in the same attack.
They are seen as among the most dangerous ransomware attackers out there, carrying out around 29 percent of such attacks in 2020, according to a recent report by IBM's Security X-Force unit.
That report estimated that REvil took ransoms worth at least $123 million in 2020.
ALSO READ - Up to 1,500 businesses affected by ransomware attack, US firm's CEO says
ETX Studio
Tue Jul 06 2021
What exactly is a ransomware attack? ETXStudiopic
'Masa untuk hentikan penderitaan' - Ketua PBB rayu keamanan
Antonio Guterres membuat rayuan untuk keamanan menjelang ulang tahun pertama konflik di Gaza minggu depan.
Larian berpakaian tidak senonoh: Tiga lelaki ditahan bantu siasatan
Dua lelaki warga asing dan seorang warga tempatan berusia antara 39 hingga 70 tahun ditahan di sebuah hotel di Kota Tinggi.
Wanita Palestin mengamuk di WTKL mohon maaf, tertekan fikir anak di Gaza
Aminah berkata, perbuatan di luar kawalan itu berlaku disebabkan rasa tertekan memikirkan keadaaan anaknya yang masih berada di Gaza.
Mangsa banjir di Perak terus meningkat, Selangor menurun
Jumlah mangsa banjir yang ditempatkan di PPS di Perak terus meningkat pagi ini manakala jumlah mangsa di Selangor menunjukkan penurunan.
Letupan baharu menggegarkan Beirut
Memetik laporan Associated Press, rejim Zionis turut menyerang kem pelarian Palestin jauh di utara buat kali pertama ketika ia menyasarkan kedua-dua pejuang Hezbollah dan Hamas.
Pelabur makin yakin, Malaysia disaran tingkatkan keperluan RE
Keperluan tenaga boleh baharu (RE) di negara ini semakin meningkat seiring keyakinan pelabur asing khususnya untuk mewujudkan pusat data, kata Timbalan Perdana Menteri, Datuk Seri Fadillah Yusof.
Dua minggu hilang, nasib Orang Asli Zuzina masih misteri
Pelbagai pihak masih mencari wanita orang Asli Zuzina Abine yang hilang selepas keluar rumah sejak 20 September lalu.
Ringgit dijangka berbanding dolar AS minggu depan
Ringgit dijangka kekal pada paras 4.21 hingga 4.22 berbanding dolar AS minggu depan, tetapi dengan kecenderungan meningkat terhadap dolar AS selepas data senarai gaji bukan ladang (NFP) Amerika Syarikat (AS) bagi September meningkat mendadak kepada 254,000 pekerjaan.
[TERKINI] Enam rakyat Malaysia selamat tiba dari Lubnan pagi ini
Kementerian Luar Negeri mengesahkan seramai enam orang rakyat Malaysia daripada sebuah keluarga selamat tiba di Lapangan Terbang Antarabangsa Kuala Lumpur (KLIA) dari Lubnan pada pagi ini (6 Oktober 2024).
Konvoi motosikal Seru For Gaza, cerminan sokongan sesama saudara
Liputan Wartawan Astro AWANI, Faida Rahim di acara konvoi motosikal Seru For Gaza di Cafe Rosco sebagai cerminan sokongan kepada saudara sesama Islam di Gaza, yang sudah setahun diperangi keganasan Israel.