[ad_1]
One of the most prolific ransomware groups in the world suddenly disappeared from the Internet on Tuesday morning. The unexplained exodus will come days before the White House and Russian top officials meet to discuss the ransomware crisis.
The ransomware crew known as REvil has been underground for years under growing cybercrime. Exciting 42% of all recent ransomware attacks go back to this gang, but they are known for both hackers. Earlier this month, the gang hit at least 1,000 businesses Kaseya attacking the software company. It was one of the most extensive ransomware campaigns ever conducted. And last month, REvil jo JBS asked the meat supplier and paid $ 11 million. Although world leaders turned their attention to software and threatened actions, REvil was a challenge — until now.
“It’s a bit of a mess while we’re trying to guess what’s going on,” says Allan Liska, chief analyst at security firm Recorded Future. “We’re very optimistic because he’s made one of the biggest gangs out there.”
There are some explanations for what caused the closure today. First, the gang itself may decide to retire if they have earned enough money or felt too much pressure. The United States or its allies have taken it offline. Or the Russian government, under international control, has forced them to close. Disappearance could be temporary – many cybercriminals believe they are “retiring” before they finally reappear under new identities.
“We recommend not to sell early for immediate consequences, but REvil is really one of the most ruthless and creative ransomware groups we have ever seen,” says Check Point Software spokesman Ekram Ahmed.
The answer is not clear and the wider ransomware problem is still huge.
“I don’t know what that means, but regardless, I’m glad!” he tweeted Katie Nickels, director of intelligence for the US company Red Canary. “If it’s the removal of the government – horrible, measures are being taken. If the actors remain silent voluntarily – great, maybe they’re scared. It’s still important to remember that this doesn’t fix ransomware.”
[ad_2]
Source link
