Notorious Russian ransomware group ‘REvil’ has reappeared

Ransomware gangs prompted the Biden administration to take action this year after they attacked critical infrastructure, including health care providers, manufacturers and gas pipeline operators. — AFP Relaxnews

The infamous criminal ransomware group behind the JBS SA cyberattack has returned to the dark web after vanishing this summer.

“REvil”, short for “Ransomware-Evil”, is among the most prolific cyber gangs to hold data for ransom. The group operates from Russia, according to cybersecurity firms and the US government, and is accused of leading a flurry of attacks this year against companies and organisations, including JBS. The giant Brazilian meat supplier eventually paid an US$11mil (RM45.73mil) ransom.