REvil Group Security Incident

Log in Username or Email Address Password Remember Me Forgot password? Search the site... Search for All categories Cybersecurity Awareness Cyber Attacks Social Engineering Miscellaneous Reset 5 minutes reading Ransomware REvil Group: Notorious Ransomware Kumar Shantanu August 26, 2022 9913 0 REvil Group (Ransomware Evil), also known as Sodinokibi, is an infamous private ransomware-as-a-service attack group (RaaS) held responsible for several vicious ransomware attacks on organizations worldwide. According to an article by Dark Reading, REvil ransomware scams were the most common ransomware variant responsible for 25% of ransomware attacks from January 2021 to July 2021 . Table of Contents Toggle Subscribe to Our Newsletter On Linkedin Sign up to Stay Tuned with the Latest Cyber Security News and Updates Subscribe Who is REvil Group? REvils name stands for Ransomware Evil and is enlightened by the Resident Evil movie series. Previously, security researchers dubbed the organizations malware family REvil or Sodinokibi. The REvil group is a hacking organization based in Russia. The REvil first showed up in April 2019 and became well-known after GandCrab, another RaaS gang that shut down its service. Investigators and security firms initially identified REvil as a strain of GandCrab or established various connections between the two. In a recent interview, an accused member of the REvil confirmed that the ransomware was not a new creation. It was built on top of an old codebase that the group acquired. How REvil Group Works? REvil group is one of the ransomware programs used in human-operated ransomware campaigns. Following a successful break-in, hackers perform lateral movement. It obtains domain administrator privileges and deploys ransomware across a network to maximize the impact. REvil differs from other ransomware attacks in that it encrypts files using Elliptic-curve Diffie-Hellman key exchange rather than RSA and Salsa20 rather than AES. The cryptographic...

... (truncated for display)