Deep Instinct argues organizations should scan MSP updates for malware

Jun 26, 2025 · Original article ↗

Summary

Using a reported MSP compromise involving DragonForce ransomware as an example, Deep Instinct argues organizations should scan software and updates from trusted partners before they reach client environments.

Key points

The article cites a reported compromise of an unnamed MSP, whose access was used to upload DragonForce ransomware into client environments.
It argues that legitimate access and trusted suppliers can create supply-chain risks, including through MSP-managed updates.
Deep Instinct recommends scanning files and updates regardless of source, before they reach business systems.
The company promotes its Data Security X for Applications product for scanning updates, claiming it can detect known and novel attacks.

Article Details

Topic: The need to scan managed-service updates and other data sources to reduce supply-chain malware risk.

Malware

DragonForce ransomwareAn example of this exact situation was recently reported by Help Net Security when an unnamed MSP was compromised by an attacker who then used their access to client environments to upload the DragonForce ransomware.

Vendors

Deep InstinctI wanted to share my perspective, shaped by past experience, and explain why I deployed Deep Instinct.

Products

Data Security X (DSX) for ApplicationsData Security X (DSX) for Applications provides an elegant solution to this problem—and it is what I deployed at scale to neutralize this threat vector while at Citi.DSX-AUsing advanced deep learning AI, DSX-A can be deployed by either the customer, or the MSP in this case, to scan and verify the updates being pushed to client environments.