ÐÇ¿Õ´«Ã½

Skip to main content

Russia's REvil ransomware group vanishes from the internet

(Soumil Kumar / Pexels.com) (Soumil Kumar / Pexels.com)
Share

REvil, the gang that attacked this spring and a major IT software vendor this month, has mysteriously vanished from the internet, according to cybersecurity experts tracking the group.

Websites and other infrastructure belonging to the , which is believed to operate from Eastern Europe or Russia, went dark on Tuesday as close observers of the group found they were unable to connect to REvil's web page listing its victims.

Others said they were unable to connect to the sites REvil uses to communicate with victims and .

"All REvil sites are down, including the payment sites and data leak site," tweeted Lawrence Abrams, creator of the information security blog BleepingComputer. "The public ransomware gang represenative [sic], Unknown, is strangely quiet."

The reasons for REvil's disappearance were not immediately clear, but it follows a raft of high-profile hackings by the group that seized control of computers around the world.

It also comes after there would be consequences if Moscow failed to address the ransomware attacks emanating from within its borders.

The Biden administration has increasingly identified ransomware as a threat to national and economic security, highlighting its potential to that Americans depend on.

Ransomware works by locking down a computer network, stealing and encrypting data until victims agree to pay a fee.

Those who refuse can find their information leaked online. In recent years, ransomware gangs have gone after hospitals, universities, police departments, city governments, and a wide range of other targets.

A source familiar told CNN the House Intelligence Committee has not been briefed on what caused REvil to go dark. An aide with the Senate Intelligence Committee said "no comment" when asked if that committee had been briefed on the situation.

Over the July 4 holiday weekend, cybersecurity experts said REvil was responsible for an , an IT software company that indirectly supports countless small businesses including accounting firms, restaurants and dentists' offices.

REvil claimed credit for the attack, demanding an to release the affected machines. US officials have also said REvil was behind the attack on JBS, one of the world's largest meatpacking companies.

REvil has obtained $11 million from victims in the course of its operation, according to the cryptocurrency payments tracker Ransomwhere.

The group's sudden disappearance has prompted widespread speculation about what may have occurred. Theories range from planned system downtime to a coordinated governmental strike. But at this stage, experts are still guessing. The FBI and US Cyber Command declined to comment on whether they may have been involved.

"This outage could be criminal maintenance, planned retirement, or, more likely, the result of an offensive response to the criminal enterprise -- we don't know," said Steve Moore, chief security strategist at the cybersecurity firm Exabeam.

Dmitri Alperovitch, co-founder of the cybersecurity firm CrowdStrike, hypothesized that western governments may be pressuring internet infrastructure companies not to complete web browser requests for REvil's sites.

Drew Schmitt, principal threat intelligence analyst at GuidePoint Security, cautioned that while an inability to connect to REvil's sites may be a potential indicator of law enforcement involvement, it doesn't prove it conclusively.

"Last week REvil's site was down for a bit as well," he said in a statement to CNN.

REvil is among the most prolific ransomware attackers, according to the cybersecurity firm CheckPoint. In the last two months alone, REvil conducted 15 attacks per week, CheckPoint spokesman Ekram Ahmed said.

Given the attention it has generated, REvil may have voluntarily chosen to lay low for a while, Ahmed added. "We recommend not jumping to any immediate conclusions as it's early, but REvil is, indeed, one of the most ruthless and creative ransomware gangs we've ever seen."

Anne Neuberger, the top White House cyber official, was traveling with Biden on Tuesday, though her reasons for accompanying the president to Philadelphia were not clear.

A White House spokesperson didn't immediately respond to a request for comment.

CTVNews.ca ÐÇ¿Õ´«Ã½

BREAKING

BREAKING

Three men were injured after a man armed with a knife entered a Montreal-area Islamic cultural centre Friday afternoon.

A 15-year-old boy who was the subject of an emergency alert in New Brunswick has been arrested.

Police have arrested an 18-year-old woman who allegedly stole a Porche and then ran over its owner in an incident that was captured on video.

Since she was a young girl growing up in Vancouver, Ginny Lam says her mom Yat Hei Law made it very clear she favoured her son William, because he was her male heir.

The parents of a teenager who died after allegedly consuming the poisonous products of a Mississauga man are now suing him, as well as several doctors involved in her care.

The search for a missing six-year-old boy in Shamattawa is continuing Friday as RCMP hope recent tips can help lead to a happy conclusion.

Local Spotlight

Getting a photograph of a rainbow? Common. Getting a photo of a lightning strike? Rare. Getting a photo of both at the same time? Extremely rare, but it happened to a Manitoba photographer this week.

They say a dog is a man’s best friend. In the case of Darren Cropper, from Bonfield, Ont., his three-year-old Siberian husky and golden retriever mix named Bear literally saved his life.

A growing group of brides and wedding photographers from across the province say they have been taken for tens of thousands of dollars by a Barrie, Ont. wedding photographer.

Paleontologists from the Royal B.C. Museum have uncovered "a trove of extraordinary fossils" high in the mountains of northern B.C., the museum announced Thursday.

The search for a missing ancient 28-year-old chocolate donkey ended with a tragic discovery Wednesday.

The Royal Canadian Mounted Police is celebrating an important milestone in the organization's history: 50 years since the first women joined the force.

It's been a whirlwind of joyful events for a northern Ontario couple who just welcomed a baby into their family and won the $70 million Lotto Max jackpot last month.

A Good Samaritan in New Brunswick has replaced a man's stolen bottle cart so he can continue to collect cans and bottles in his Moncton neighbourhood.

David Krumholtz, known for roles like Bernard the Elf in The Santa Clause and physicist Isidor Rabi in Oppenheimer, has spent the latter part of his summer filming horror flick Altar in Winnipeg. He says Winnipeg is the most movie-savvy town he's ever been in.