Enlarge (credit: Getty Images ) Russian law enforcement authorities said on Friday that they have arrested 14 people associated with REvil, a top ransomware group that has disrupted critical operations of wealthy targets and held their data hostage. The action, carried out by Russia’s FSB, the successor agency to the particular KGB, is a rare […]
Enlarge / Russian national Yevgyeniy Polyanin remains at large. (credit: FBI) US authorities have brought criminal charges against a Ukrainian and a Russian national for their roles in high-profile ransomware attacks as part of a sprawling global crackdown on digital extortion groups. The US justice department on Monday said it had charged Ukrainian Yaroslav Vasinskyi, […]
Enlarge (credit: Aurich Lawson) Four days ago, the REvil ransomware gang’s leak site, known as the “Happy Blog, ” went offline. Cybersecurity experts wondered aloud what might have caused the infamous group to go dark once more. One theory was that it was an inside job pulled by the particular group’s disaffected former leader. Another […]
Enlarge / The seal of the Federal Bureau of Investigation (FBI) is seen at the J. Edgar Hoover building in Washington, D.C. (credit: Andrew Harrer/Bloomberg) For three weeks during the REvil ransomeware attack this summer, the FBI secretly withheld the key that would have decrypted data and computers on up to 1,500 networks, including those […]
Enlarge (credit: Getty Images) July has so far ushered in at least two new ransomware groups. Or maybe they’re old ones undergoing a rebranding. Researchers are in the process of running down several different theories. Both groups say they are aiming for big-game targets, meaning corporations or other large businesses with the pockets to pay […]
Enlarge (credit: Getty Images ) Kaseya—the remote management software seller at the center of a ransomware operation that struck as many as 1, 500 downstream networks—said it has obtained a decryptor that should successfully restore data encrypted during the Fourth of July weekend attack. Affiliates of REvil, one of the Internet’s most cutthroat ransomware groups, […]
Enlarge (credit: Suebsiri Srithanyarat / EyeEm / Getty Images) As many as 1,500 businesses around the world have been infected by highly destructive malware that first struck software maker Kaseya. In one of the worst ransom attacks ever, the malware, in turn, used that access to fell Kaseya’s customers. The attack struck on Friday afternoon […]
Enlarge / Ransomware (credit: Getty Images) The cyberattack that halted some operations at the world’s biggest meat processor this week was the work of REvil, a ransomware franchise that’s known for its ever-escalating series of cut-throat tactics designed to extort the highest price. The FBI made the attribution on Wednesday, a day after word emerged […]
Enlarge Darkside—the ransomware group that disrupted gasoline distribution across a wide swath of the US this week—has gone dark, leaving it unclear if the group is ceasing, suspending, or altering its operations or is simply orchestrating an exit scam. On Thursday, all eight of the dark web sites Darkside used to communicate with the public […]