MSP Get's Hacked & RMM Tool Flaw With ConnectWise  API connecting to Kaseya
Channel: Lawrence Systems
Date: 2019-02-07

Connecting With Us
---------------------------------------------------  
+ Hire Us For A Project: https://lawrencesystems.com/hire-us/
+ Tom Twitter 🐦 https://twitter.com/TomLawrenceTech
+ Our Web Site https://www.lawrencesystems.com/
+ Our Forums https://forums.lawrencesystems.com/
+ Instagram https://www.instagram.com/lawrencesystems/
+ Facebook https://www.facebook.com/Lawrencesystems/
+ GitHub https://github.com/lawrencesystems/
+ Discord https://discord.gg/ZwTz3Mh

Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 https://lawrence.video/swag


AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 https://www.amazon.com/shop/lawrencesystemspcpickup

UniFi Affiliate Link
🛒 https://lawrence.video/unifi-affiliate

All Of Our Affiliates that help us out and can get you discounts!
🛒 https://lawrencesystems.com/partners-we-love/

Gear we use on Kit 
🛒 https://kit.co/lawrencesystems

Use OfferCode LTSERVICES to get 5% off your order at
🛒 https://lawrence.video/techsupplydirect

Digital Ocean Offer Code
🛒 https://m.do.co/c/85de8d181725

HostiFi UniFi Cloud Hosting Service
🛒 https://hostifi.net/?via=lawrencesystems

Protect you privacy with a VPN from Private Internet Access
🛒 https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS

Patreon
💰 https://www.patreon.com/lawrencesystems




PIA Internet Access Affiliates Link
https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS
Local MSP got hacked and all clients cryptolocked
https://www.reddit.com/r/msp/comments/ani14t/local_msp_got_hacked_and_all_clients_cryptolocked/

Deep Dive: Kaseya VSA Mining Payload
https://helpdesk.kaseya.com/hc/en-gb/articles/360022564252-Connectwise-API-Vulnerability


https://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88

The GitHub Proof of Concept
https://github.com/kbni/owlky

Kaseya VSA RMM Vulnerability Exploited For Cryptocurrency Mining Attack... AGAIN!
https://youtu.be/iRq5zTZGsP4