Three Theories Explain Why the REvil Gang Went Dark

Microsoft issues 116 patches in a major security update, CISA issues emergency directive on PrintNightmare, Microsoft pins SolarWinds' Serv-U technology hacks on Chinese group, much more

Jul 14, 2021

∙ Paid

Don’t miss my CSO column from today on how NIST’s recent publication of software security measures under Biden’s EO could be a game-changer.

The infrastructure and websites for the Russia-based REvil operation, which was behind the most recent high-profile ransomware attack on Kaseya, went offline mysteriously two nights ago and security experts posit three reasons for this outcome.

The first is that the U.S. took action against REvil, following White House threats against Russia in the wake of so many damaging ransomware attacks emanating from the country. The second theory is that Putin is heeding US warnings and ordered the REvil gang to step down. The third theory holds that the REvil gang feels the political heat and is shutting down operations, perhaps temporarily. (Lawrence Abrams / Bleeping Computer)

Keep reading with a 7-day free trial

Subscribe to Metacurity to keep reading this post and get 7 days of free access to the full post archives.