Security News > 2022 > January > Russian Security Takes Down REvil Ransomware Gang

Russia's Federal Security Service has swooped in to "Liquidate" the REvil ransomware gang, it said on Friday.

The move comes two weeks after a high-stakes phone call between Russian President Vladimir Putin and U.S. President Joe Biden, who has been calling for action against Russia-dwelling ransomware gangs for months.

REvil once rose to dominance as a major fixture in the ransomware extortion racket - locking up big-fish target networks and extracting millions in ransom payments.

The reported takedown may have defanged a brand-name ransomware operator, but REvil is far from what it used to be, and other groups continue to strike with impunity.

In November, Europol announced the arrest of a total of seven suspected REvil/GandCrab ransomware affiliates - including a Ukrainian national charged by the United States with ransomware assaults that include the Kaseya attacks.

Russia, for its part, may gain some kudos for this week's action, though researchers have long noted that the country has become a safe haven for ransomware masterminds, who avoid attacking Russian targets in exchange.

News URL

https://threatpost.com/russian-security-revil-ransomware/177660/