

The key that made the tool possible reportedly came from a law enforcement agency-but not the FBI.ĭespite the FBI’s efforts to take it down, REvil is back this month with a new string of attacks, ensnaring at least eight new victims, the Post reported. About 250 victims have used the tool so far, a Bitdefender executive said. Last Thursday, cybersecurity firm Bitdefender published a universal decryptor tool for networks and computers encrypted before REvil’s hibernation began on July 13. Other victims spent weeks restoring their systems. Coop, the Swedish grocery store chain, closed around 700 stores and took some six days to reopen. Grocery stores in Sweden, town halls in Maryland, schools in New Zealand, and a hospital in Romania were all affected by the attack. The hole in the company’s VSA product gave REvil access to 54 service providers who manage networks for up to 1,500 businesses and other organizations. It struck again when it exploited a zero-day in remote management tools made by Kaseya, a Florida-based IT firm. Advertisementįurther Reading Attack on meat supplier came from REvil, ransomware’s most cutthroat gangThe group resurfaced this summer when it disrupted operations at Brazil-based meat processor JBS and caused several plants in the US, Canada, and Australia to shut down. Then in May, it shut down Colonial Pipeline’s operations from New Jersey to Texas, leading to fuel shortages. In April, the gang stole data from contract manufacturer Quanta Computer, publishing details of two Apple products.

When the law firm balked, REvil doubled the demand and released some of Lady Gaga’s files. In March, the group hacked a celebrity law firm that represented U2, Madonna, and Lady Gaga, demanding $21 million. The Russia-based gang first appeared in 2019, and it was on a tear earlier this year. REvil has a long history of using high-pressure tactics to extort victims. decisions, designed to create maximum impact, and that takes time in going against adversaries where we have to marshal resources not just around the country but all over the world.” Years of disruption “We make the decisions as a group, not unilaterally,” FBI Director Christopher Wray told Congress on Tuesday. I wish to procure Encrypt Files Lite or Professional, but it is not on the Apple Store in Switzerland and it is impossible to switch to another store. For reasons that haven’t been explained, the FBI didn’t cough up the key until July 21. Further Reading Kaseya gets master decryptor to help customers still suffering from REvil attackInstead, REvil went dark on July 13 before the FBI could step in.
