Category Archives: rEvil

What to Do When a Ransomware Group Disappears

Posted on by

It’s your company’s worst nightmare: attackers managed to sneak ransomware onto your servers. Now, you’re locked out of every file unless you agree to pay whatever price they’re asking. As if the situation couldn’t get any worse, the attackers disappear without a trace and you can’t even pay their ransom to unlock your files. What […]

The post What to Do When a Ransomware Group Disappears appeared first on Security Intelligence.

Continue reading What to Do When a Ransomware Group Disappears→

FBI seized $2.3 million in cryptocurrency from REvil ransomware affiliate

Posted on by

The FBI in August seized approximately $2.3 million worth of cryptocurrency from a hacker affiliated with the REvil ransomware gang, according to a court filing unsealed Tuesday. The money seized was derived from payments to ransomware attacks involving REvil malware between April 2019 and June 2021 in the U.S. and elsewhere.  REvil affiliates generated some $200 million dollars during that time from in ransom payments, according to the FBI. The attacks were allegedly carried out by Aleksandr Sikerin, who is charged with multiple counts of conspiracy and money laundering. Bleeping Computer first reported on the court documents. It’s unclear if the seizure is related to  the U.S. actions in November, in which officials seized $6 million in ransom payments from alleged Russian hacker Yevgeniy Polyanin. Authorities also arrested Yaroslav Vasinksyi, a 22-year-old Ukrainian national, when he was entering Poland. Vasinskyi is accused of involvement in the July REvil attack against […]

The post FBI seized $2.3 million in cryptocurrency from REvil ransomware affiliate appeared first on CyberScoop.

Continue reading FBI seized $2.3 million in cryptocurrency from REvil ransomware affiliate→

REvil Ransom Arrest, $6M Seizure, and $10M Reward

Posted on by

The U.S. Department of Justice said today it arrested a Ukrainian man who deployed ransomware on behalf of the REvil ransomware gang, a Russian cybercriminal collective that has extorted hundreds of millions from victim organizations. The DOJ also said it had seized $6.1 million in cryptocurrency sent to another REvil affiliate, and that the State Department is now offering up to $10 million for information leading to the arrest of any key leaders of REvil. Continue reading REvil Ransom Arrest, $6M Seizure, and $10M Reward→

US charges 2, seizes more than $6 million as part of dragnet against REvil ransomware gang

Posted on by

The U.S. government announced a sweeping set of actions Monday targeting alleged REvil ransomware attackers in Europe, including an arrest, an indictment, seizure of more than $6 million in stolen money, and new sanctions against a cryptocurrency exchange service and companies that support it. Yaroslav Vasinksyi, 22 a Ukrainian national, was arrested Oct. 8 as he crossed the border into Poland at the behest of US authorities, CyberScoop first reported Nov. 2. Vaskinskyi is accused of writing the code behind REvil malware, also known as Sodinokibi, which has become among the most virulent ransomware strains in use. U.S. Attorney General Merrick Garland said the malware has been “deployed” against roughly 175,000 computers worldwide, generating at least $200 million in extortion fees. U.S. officials also announced criminal charges against Yevgeniy Polyanin, a Russian national. Along with the charges of conspiracy to commit fraud in connection with computers, intentional damage to a […]

The post US charges 2, seizes more than $6 million as part of dragnet against REvil ransomware gang appeared first on CyberScoop.

Continue reading US charges 2, seizes more than $6 million as part of dragnet against REvil ransomware gang→

BlackMatter ransomware gang is reportedly quitting operation

Posted on by

By Waqas
BlackMatter ransomware gang, which is believed to be a rebrand of DarkSide, has decided to end the project, giving in to the pressures of the local law enforcement authorities.
This is a post from HackRead.com Read the original post: BlackMatt… Continue reading BlackMatter ransomware gang is reportedly quitting operation→

Ransomware gang outraged at “bandit-mugging behavior of the United States” after REvil group pushed offline

Posted on by

The Conti ransomware gang is outraged that the United States appears to have hacked into the REvil ransomware gang’s infrastructure, and knocked it offline… Continue reading Ransomware gang outraged at “bandit-mugging behavior of the United States” after REvil group pushed offline→

Conti Ransom Gang Starts Selling Access to Victims

Posted on by

The Conti ransomware affiliate program appears to have altered its business plan recently. Organizations infected with Conti’s malware who refuse to negotiate a ransom payment are added to Conti’s victim shaming blog, where confidential files stolen from victims may be published or sold. But sometime over the past 48 hours, the cybercriminal syndicate updated its victim shaming blog to indicate that it is now selling access to many of the organizations it has hacked. Continue reading Conti Ransom Gang Starts Selling Access to Victims→