THREAT ACTOR: REvil

REvil (Ransomware Evil, also known as Sodinokibi) is a private ransomware-as-a-service (RaaS) operation. After an attack, REvil would threaten to publish the information on their page 'Happy Blog' unless the ransom is received.

 

Incidents Associated with this Threat

  • July 2, 2021: Supply Chain Attack Guidance Released

Malware Used by this Threat Actor

No malware identified for this threat actor.

Pin It on Pinterest

Scroll to Top