Friday, December 6, 2024
HomeRansomwareRomanian Authorities Arrested Two REvil Ransomware RaaS Family Affiliates

Romanian Authorities Arrested Two REvil Ransomware RaaS Family Affiliates

Published on

SIEM as a Service

Seven users were recently being suspected of using ransomware services on the Internet were arrested, and out of that seven users, five detainees are assumed of having links with the REvil group.

However, among the five detainees, one is a Ukrainian imposed by the United States with ransomware attacks that include the Kaseya attacks which were attributed to REvil.

While Europol affirmed that the suspects are considered to have harmonized more than 5,000 ransomware attacks and they have also forced close to $600,000 from victims.

- Advertisement - SIEM as a Service

On November 4 an arrest took place which was a  part of a joint operation named as GoldDust, this operation led to the arrest of three other REvil members, and out of the three, two suspects have been connected to GandCrab in Kuwait and South Korea.

DOJ Seizes $6.1M in Ransom Profits

The U.S. Department of Justice (DOJ) opened an accusation that is crediting Yaroslav Vasinskyi, 22, a citizen of Ukrainian, that has been conducting ransomware attacks against multiple victims.

Moreover, the DOJ also stated that they have seized $6.1 million as ransom payments, and this money was being received by Yevgeniy Polyanin, 28, a Russian citizen, who is also charged for conducting several attacks in Texas.

Operation GoldDust

The operation GoldDust was done specifically to arrest the members of REvil ransomware group. The REvil operators pronounced that their infrastructure went down and they are discontinuing their operations for the time being but that will soon come back.

The Europol declared the results of the GoldDust operation, in which it was found that 17 other countries participated in it, with the support of Interpol and Eurojust.

Lastly, during the period of their activity, the threat actors have attacked about 7 thousand users, requesting a total of more than 200 million euros as ransom.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity, and hacking news updates.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

One Identity Named Winner of the Coveted Top InfoSec Innovator Awards for 2024

One Identity named Hot Company: Privileged Access Management (PAM) in 12th Cyber Defense Magazine’s...

HCL DevOps Deploy / Launch Vulnerability Let Embed arbitrary HTML tags

Recently identified by security researchers, a new vulnerability in HCL DevOps Deploy and HCL...

CISA Warns of Zyxel Firewalls, CyberPanel, North Grid, & ProjectSend Flaws Exploited in Wild

The Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings about several vulnerabilities being...

HackSynth : Autonomous Pentesting Framework For Simulating Cyberattacks

HackSynth is an autonomous penetration testing agent that leverages Large Language Models (LLMs) to...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

Fuji Electric Indonesia Hit by Ransomware Attack

Fuji Electric Indonesia has fallen victim to a ransomware attack, impacting its operations and...

Researchers Detailed New Exfiltration Techniques Used By Ransomware Groups

Ransomware groups and state-sponsored actors increasingly exploit data exfiltration to maximize extortion and intelligence...

Helldown Ransomware Attacking Windows And Linux Servers Evading Detection

Helldown Ransomware, a sophisticated cyber threat, actively targets critical industries worldwide by leveraging advanced...