{"id":1092,"date":"2022-01-14T21:05:49","date_gmt":"2022-01-14T21:05:49","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/01\/14\/russia-says-it-has-shut-down-notorious-revil-ransomware-group\/"},"modified":"2022-01-14T21:05:49","modified_gmt":"2022-01-14T21:05:49","slug":"russia-says-it-has-shut-down-notorious-revil-ransomware-group","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/01\/14\/russia-says-it-has-shut-down-notorious-revil-ransomware-group\/","title":{"rendered":"Russia says it has shut down notorious REvil ransomware group"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

What just happened?<\/strong> Russia\u2019s FSB has arrested members of REvil, a ransomware group responsible for many cyberattacks across the US last year, including the Kaseya attack. Amid the arrest, the FSB seized millions of dollars in cash and assets. <\/p>\n

According to machine translation of the FSB\u2019s announcement<\/a>, the Russian agency raided 25 addresses belonging to 14 people. During the raids it sized around 426 million rubles (about $5.6 million), $600,000 USD, 500,000 Euros, computers, crypto wallets, and 20 cars. The FSB charged the suspects with \u201cillegal circulation of means of payment.\u201d<\/p>\n

The raids took place at the request of US authorities after they reported on a member of the group. That part of the FSB\u2019s announcement may be a reference to Operation GoldDust, in which Romanian police arrested<\/a> two people linked to REvil last November. In October, German authorities claimed<\/a> to have identified a REvil member vacationing in the Mediterranean.<\/p>\n

\n

Below is a video of the FSB’s REvil raids pic.twitter.com\/Oh7Ef2GpQO<\/a><\/p>\n

\u2014 Catalin Cimpanu (@campuscodi) January 14, 2022<\/a><\/p><\/blockquote>\n

Last summer, REvil\u2019s ransomware software was responsible for the cyberattack on business platform Kaseya, which affected<\/a> hundreds of US businesses. Soon after, President Joe Biden made clear<\/a> he wanted the Russian government to act on the activities of gangs like REvil that operate from inside Russia. The country has been accused of turning a blind eye to the gangs\u2019 actions as long as they don\u2019t attack anyone inside Russia.<\/p>\n

A US official told<\/a> The Washington Post one person the FSB arrested was involved in the Colonial Pipeline cyberattack<\/a>, which was claimed by another ransomware group \u2013 DarkSide. It\u2019s possible the individual worked for both DarkSide and REvil.<\/p>\n

The FSB\u2019s announcement comes around the same time that Ukranian government servers were attacked<\/a>. No one has claimed responsibility for the cyberattack, but it occurred amidst fears of a Russian invasion of Ukraine, which the Ukranian government suspects would begin with cyberattacks on the country\u2019s infrastructure. Over 100,000 Russian troops are currently massed near the Ukranian border.<\/p>\n<\/p><\/div>\n