200 US businesses come under 'huge' cyber-attack

Kaseya said one of its applications that runs corporate servers, desktop computers and network devices might have been compromised in the attack.

The company said it was urging customers that use its VSA tool to immediately shut down their servers.

Kaseya said in its statement that a "small number" of companies had been affected, though Huntress Labs said the number was greater than 200.

It is not clear what specific companies have been affected and a Kaseya representative contacted by the BBC declined to give details.

Kaseya's website says it has a presence in over 10 countries and more than 10,000 customers."This is a colossal and devastating supply chain attack," Huntress Labs' senior security researcher John Hammond said in an email to Reuters news agency.

At a summit in Geneva last month, US President Joe Biden said he told Russian President Vladimir Putin he had a responsibility to rein in such cyber-attacks.

Mr Biden said he gave Mr Putin a list of 16 critical infrastructure sectors, from energy to water, that should not be subject to hacking.

REvil - also known as Sodinokibi - is one of the most prolific and profitable cyber-criminal groups in the world.

The gang was blamed by the FBI for a hack in May that paralysed operations at JBS - the world's largest meat supplier.

The group sometimes threatens to post stolen documents on its website - known as the "Happy Blog" - if victims don't comply with its demands.REvil was also linked to a co-ordinated attack on nearly two dozen local governments in Texas in 2019.

SOURCE: BBC NEWS