The United States announced a few days ago that REvil, the number one ransomware group, has been “eliminated.”
According to a report by “Reuters”, three private-sector cyber experts and former officials cooperating with the United States said that REvil has been attacked by the United States and other countries this week, and the REvil server has been infiltrated and taken offline and has been declared wiped out.
Stephanie Hinds, US Attorney for the Northern District of California, Lisa Monaco, Deputy Attorney General, and Paul Abbate, Deputy Director of the FBI, said about ransomware attacks at a press conference in Washington. The United States and many countries have joined forces against hacker groups, and REvil is the primary one. The sanctioned target was that the group hacked Kaseya’s software Kaseya VSA earlier, and the FBI has penetrated REvil’s server and obtained the decryption key. It was only three weeks later after the key was handed over to Kaseya.
Attack Kaseya demanding 70 million ransom
The United States and other countries launched a raid on the REvil server last week, and the server is currently collapsed. It was reported that after attacking Kaseya, REvil asked for a ransom of 70 million US dollars in exchange for the decryption key. This incident affected the company’s 60 customers and implicated 1,500 manufacturers.
Finally, Kaseya obtained the decryption key from a third party.
In any case, I hope that Revil is completely wiped out, and will not make a comeback.