Security News > 2021 > September > FBI Had the REvil Decryption Key

The Washington Post reports that the FBI had a decryption key for the REvil ransomware, but didn't pass it along to victims because it would have disrupted an ongoing operation.

The key was obtained through access to the servers of the Russia-based criminal gang behind the July attack.

Deploying it immediately could have helped the victims, including schools and hospitals, avoid what analysts estimate was millions of dollars in recovery costs.

The FBI held on to the key, with the agreement of other agencies, in part because it was planning to carry out an operation to disrupt the hackers, a group known as REvil, and the bureau did not want to tip them off.

A government assessment found the harm was not as severe as initially feared.

Fighting ransomware is filled with security trade-offs.

News URL

https://www.schneier.com/blog/archives/2021/09/fbi-had-the-revil-decryption-key.html