Exclusive: Governments turn tables on ransomware gang REvil by pushing it offline -sources

FILE PHOTO: Acting U.S. Attorney for the Northern District of California Stephanie Hinds speaks about the Colonial Pipeline ransomware attack during a news conference with Deputy U.S. Attorney General Lisa Monaco and FBI Deputy Director Paul Abbate at the Justice Department in Washington, U.S., June 7, 2021. REUTERS/Jonathan Ernst/Pool/File Photo

(Reuters) - The ransomware group REvil was itself hacked and forced offline this week by a multi-country operation, according to three private sector cyber experts working with the United States and one former official.

Former partners and associates of the Russian-led criminal gang were responsible for a May cyberattack on the Colonial Pipeline that led to widespread gas shortages on the U.S. East Coast. REvil's direct victims include top meatpacker JBS. The crime group's "Happy Blog” website, which had been used to leak victim data and extort companies, is no longer available.