Wednesday, November 13, 2024
HomeRansomwareRussia Arrests Hackers Behind REvil Ransomware & Shutdown Operations

Russia Arrests Hackers Behind REvil Ransomware & Shutdown Operations

Published on

Malware protection

At the request of the United States, the Federal Security Service (FSB) has recently arrested all the hackers behind the REvil ransomware group and claimed to have completely shut down all operations of the group.

The closure of the REvil ransomware gang comes after a Ukrainian citizen was arrested in Poland last November for using REvil ransomware to attack company computers and demand large ransoms of about 6 million dollars that are grasped by the hackers to release the stored information of the targeted companies.

With 25 police raids, Russia has completed the operation after receiving the request from the authorities of the United States, and during the raids, the FSB arrested 14 people.

- Advertisement - SIEM as a Service

All these 25 raids were performed in the following places:-

  • St. Petersburg
  • Moscow
  • Leningrad
  • Lipetsk regions

Among those 14 arrested people, they also found the leader of the group, who not only directed the ransomware attacks but also stole money from bank accounts of foreign citizens in Russia.

After facing such issues, finally, President Joe Biden requested Vladimir Putin (the President of Russia) last summer to start the seizure operation; however, the FSB clarifies that REvil members with Russian citizenship will not be deported to the United States.

Seizure

As part of the operation, Russian agents have seized the following things that were obtained with the money from the ransoms and thefts:-

  • More than 6 million euros
  • Various currencies
  • Computer equipment
  • Cryptocurrency wallets
  • Over 426 million rubles
  • $600 thousand
  • 20 premium and luxury cars

After organizing the largest ransomware operation in history and this seizure, the REvil ransomware became the most wanted hacker group on the planet.

Their operations have affected more than 1500 companies and businesses around the globe whose servers were hacked by the operators of this group. Not only that, even the group also asked those companies to pay $70 million as a ransom for the release. 

However, these operations were the most recent and might be the last of many such attacks. Unlike other groups, the REvil hacker group had an inclination for flashy attacks, and they were not shy about announcing their accomplishments on their official “Dark Web” portal. 

Apart from this, among all its victims, Apple is also on the list who saw several blueprints for its new products like the new iMac and new MacBook Pro were posted on the internet. 

While they also asked for $42 million from the then US president, Donald Trump Jr., not to make the seized data public, and in this case, they managed to hack this data from the systems of the lawyer of Donald Trump Jr.

Moreover, to make the group most wanted on the planet the US government has also played a vital role by offering rewards of up to $10 million for the information from its members.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Automating Identity and Access Management for Modern Enterprises

Keeping track of who has access and managing their permissions has gotten a lot...

Finding The Right E-Commerce Platform – Comparing Reselling Solutions

If you’re looking to make some extra cash or to start a business, you...

Fortinet Patches Critical Flaws That Affected Multiple Products

Fortinet, a leading cybersecurity provider, has issued patches for several critical vulnerabilities impacting multiple...

China-Nexus Actors Hijack Websites to Deliver Cobalt Strike malware

A Chinese state-sponsored threat group, identified as TAG-112, has been discovered hijacking Tibetan community...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Rise Of Ransomware-As-A-Service Leads To Decline Of Custom Tools

Ransomware-as-a-Service (RaaS) platforms have revolutionized the ransomware market.Unlike traditional standalone ransomware sales, RaaS...

A Massive Hacking Toolkit From “You Dun” Threat Group Developed To Lauch Massive Cyber Attack

The "You Dun" hacking group exploited vulnerable Zhiyuan OA software using SQL injection, leveraging...

Embargo Ransomware Actors Abuses Safe Mode To Disable Security Solutions

In July 2024, the ransomware group Embargo targeted US companies using the malicious loader...