Friday, March 29, 2024

Russia Arrests Hackers Behind REvil Ransomware & Shutdown Operations

At the request of the United States, the Federal Security Service (FSB) has recently arrested all the hackers behind the REvil ransomware group and claimed to have completely shut down all operations of the group.

The closure of the REvil ransomware gang comes after a Ukrainian citizen was arrested in Poland last November for using REvil ransomware to attack company computers and demand large ransoms of about 6 million dollars that are grasped by the hackers to release the stored information of the targeted companies.

With 25 police raids, Russia has completed the operation after receiving the request from the authorities of the United States, and during the raids, the FSB arrested 14 people.

All these 25 raids were performed in the following places:-

  • St. Petersburg
  • Moscow
  • Leningrad
  • Lipetsk regions

Among those 14 arrested people, they also found the leader of the group, who not only directed the ransomware attacks but also stole money from bank accounts of foreign citizens in Russia.

After facing such issues, finally, President Joe Biden requested Vladimir Putin (the President of Russia) last summer to start the seizure operation; however, the FSB clarifies that REvil members with Russian citizenship will not be deported to the United States.

Seizure

As part of the operation, Russian agents have seized the following things that were obtained with the money from the ransoms and thefts:-

  • More than 6 million euros
  • Various currencies
  • Computer equipment
  • Cryptocurrency wallets
  • Over 426 million rubles
  • $600 thousand
  • 20 premium and luxury cars

After organizing the largest ransomware operation in history and this seizure, the REvil ransomware became the most wanted hacker group on the planet.

Their operations have affected more than 1500 companies and businesses around the globe whose servers were hacked by the operators of this group. Not only that, even the group also asked those companies to pay $70 million as a ransom for the release. 

However, these operations were the most recent and might be the last of many such attacks. Unlike other groups, the REvil hacker group had an inclination for flashy attacks, and they were not shy about announcing their accomplishments on their official “Dark Web” portal. 

Apart from this, among all its victims, Apple is also on the list who saw several blueprints for its new products like the new iMac and new MacBook Pro were posted on the internet. 

While they also asked for $42 million from the then US president, Donald Trump Jr., not to make the seized data public, and in this case, they managed to hack this data from the systems of the lawyer of Donald Trump Jr.

Moreover, to make the group most wanted on the planet the US government has also played a vital role by offering rewards of up to $10 million for the information from its members.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates

Website

Latest articles

Beware Of Weaponized Air Force invitation PDF Targeting Indian Defense And Energy Sectors

EclecticIQ cybersecurity researchers have uncovered a cyberespionage operation dubbed "Operation FlightNight" targeting Indian government...

WarzoneRAT Returns Post FBI Seizure: Utilizing LNK & HTA File

The notorious WarzoneRAT malware has made a comeback, despite the FBI's recent efforts to...

Google Revealed Kernel Address Sanitizer To Harden Android Firmware And Beyond

Android devices are popular among hackers due to the platform’s extensive acceptance and open-source...

Compromised SaaS Supply Chain Apps: 97% of Organizations at Risk of Cyber Attacks

Businesses increasingly rely on Software as a Service (SaaS) applications to drive efficiency, innovation,...

IT and security Leaders Feel Ill-Equipped to Handle Emerging Threats: New Survey

A comprehensive survey conducted by Keeper Security, in partnership with TrendCandy Research, has shed...

How to Analyse .NET Malware? – Reverse Engineering Snake Keylogger

Utilizing sandbox analysis for behavioral, network, and process examination provides a foundation for reverse...

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report highlighting...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Mitigating Vulnerability Types & 0-day Threats

Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

Related Articles