#kaseya

Analysis · May 20, 2026 · Colten Anderson

Compromise one MSP's RMM, ransom a thousand businesses: the Kaseya pattern

Kaseya VSA is remote-monitoring software MSPs use to manage thousands of client machines. That reach is why it keeps getting attacked, and why in 2021 REvil used it to push ransomware to roughly 1,500 downstream businesses in a single weekend.