rEvil Archives - s0x • Austin Managed IT Services

28 Jan, 2022

Who Wrote the ALPHV/BlackCat Ransomware Strain?

Cybersecurity @CookieDays, A Little Sunshine, ALPHV ransomware, Binrs, BlackCat ransomware, BlackMatter, Breadcrumbs, Catalin Cimpanu, DarkSide, DuckerMan, duckermanit, Flashpoint, Jason Hill, Ne'er-Do-Well News, Paul Roberts, RAMP, Recorded Future, ReversingLabs, rEvil, Sergey Duck, Sergey Kryakov, Sergey Penchikov, smiseo, The Record, ToX, Varonis, YBCat

14 Jan, 2022

At Request of U.S., Russia Rounds Up 14 REvil Ransomware Affiliates

Cybersecurity Andrey Sergeevich Bessonov, Colonial Pipeline, DarkSide, Dmitri Alperovitch, FSB, GandCrab, Immersive Labs, Kevin Breen, Ne'er-Do-Well News, NotPetya, President Biden, Ransomware, rEvil, Roman Gennadyevich Muromsky, The Coming Storm, Vladimir Putin

The Russian government said today it arrested 14 people accused of working for “REvil,” a particularly aggressive ransomware group that has extorted hundreds of millions of dollars from victim organizations. The Russian Federal Security Service (FSB) said the actions were taken in response to a request from U.S. officials, but many experts believe the crackdown is part of an effort to reduce tensions over Russian President Vladimir Putin’s decision to station 100,000 troops along the nation’s border with Ukraine. …

9 Nov, 2021

REvil Ransom Arrest, $6M Seizure, and $10M Reward

Cybersecurity Breadcrumbs, [email protected], Ne'er-Do-Well News, Ransomware, rEvil, U.S. Department of State, vkontakte, [email protected], Yevgeniy Igorevich Polyanin

The U.S. Department of Justice said today it arrested a Ukrainian man who deployed ransomware on behalf of the REvil ransomware gang, a Russian cybercriminal collective that has extorted hundreds of millions from victim organizations. The DOJ also said it had seized $6.1 million in cryptocurrency sent to another REvil affiliate, and that the State Department is now offering up to $10 million for information leading to the arrest of any key leaders of REvil. …

25 Oct, 2021

Conti Ransom Gang Starts Selling Access to Victims

Cybersecurity Conti ransomware, Digital Shadows, Emsisoft, Fabian Wosar, FIN 12, Ivan Righi, Other, Ransomware, rEvil, Ryuk

The Conti ransomware affiliate program appears to have altered its business plan recently. Organizations infected with Conti’s malware who refuse to negotiate a ransom payment are added to Conti’s victim shaming blog, where confidential files stolen from victims may be published or sold. But sometime over the past 48 hours, the cybercriminal syndicate updated its victim shaming blog to indicate that it is now selling access to many of the organizations it has hacked. …

8 Jul, 2021

Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software

Cybersecurity A Little Sunshine, alex holden, CVE-2015-2862, CVE-2021-30116, Data Breaches, Dutch Institute for Vulnerability Disclosure, Fred Voccola, Hold Security, Kaseya, Mandiant, Michael Sanders, Ransomware, rEvil, Victor Gevers, Wietse Boonstra

Last week cybercriminals deployed ransomware to 1,500 organizations that provide IT security and technical support to many other companies. The attackers exploited a vulnerability in software from Kaseya, a Miami-based company whose products help system administrators manage large networks remotely. Now it appears Kaseya’s customer service portal was left vulnerable until last week to a data-leaking security flaw that was first identified in the same software six years ago. …

7 Jun, 2021

Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang

Cybersecurity A Little Sunshine, Colonial Pipeline, DarkSide ransomware, Elliptic, Ne'er-Do-Well News, Nicholas Weaver, Ransomware, rEvil, Sodinokibi, Tom Robinson, U.S. Department of Justice

17 May, 2021

Try This One Weird Trick Russian Hackers Hate

Cybersecurity Allison Nixon, Colonial Pipeline ransomware attack, Cybereason, DarkSide ransomware, fbi, Lance James, Microsoft Windows, Ransomware, rEvil, Security Tools, Sodinokibi, twitter, Unit221B

In a Twitter discussion last week on ransomware attacks, KrebsOnSecurity noted that virtually all ransomware strains have a built-in failsafe designed to cover the backsides of the malware purveyors: They simply will not install on a Microsoft Windows computer that already has one of many types of virtual keyboards installed — such as Russian or Ukrainian. So many readers had questions in response to the tweet that I thought it was worth a blog post exploring this one weird cyber defense trick. …

14 May, 2021

DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized

Cybersecurity Avaddon, BitMix, Colonial Pipeline ransomware attack, DarkSide ransomware, Intel 471, Ne'er-Do-Well News, Ransomware, rEvil, XSS

5 Apr, 2021

Ransom Gangs Emailing Victim Customers for Leverage

Cybersecurity Bleeping Computer, Clop, Emsisoft, Fabian Wosar, Lawrence Abrams, Racetrac, Ransomware, rEvil, The Coming Storm

28 Oct, 2020

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

Cybersecurity Dagens Nyheter, Data Breaches, Gunnebo Group breach, Hold Security, Intel 471, Linus Larsson, Mark Arena, Ransomware, Rasmus Jansson, RDP, rEvil, Sodinokibi, Stefan Syrén

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of clients globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. …

s0x • Austin Managed IT Services

s0x • Austin Managed IT Services

Tag Archives: rEvil