Tag: revil

  • Swiss Government and Bank System Under Siege

    —

    by

    Cybersecurity Analyst
    in ,

    Pro-Russian Cyber Group “NoName” Attacks and Leaves Unresponsive Dozens of Swiss Websites On Monday, June 12, 2023, the Swiss government and several state-linked companies fell victim to a series of cyber-attacks, rendering their websites inaccessible. The finance ministry of Switzerland confirmed the incident, stating that federal administration specialists were quick to notice the attack and…

  • Ransomware Continues Attacks on Healthcare

    —

    by

    Cybersecurity Analyst
    in ,

    French and Australian recent ransomware victims Recent months show an increased number of cyber attacks targeting hospitals and various healthcare establishments and facilities. This behaviour is unprecedented and is very dangerous for both healthcare providers and the patients. The Kaduu Team spends a lot of time in the darknet and underground hacking forums: even hackers…

  • Popular ransomware bugs allow blocking encryption

    —

    by

    Cybersecurity Analyst
    in

    Hackers are known to exploit vulnerabilities to gain access to databases and companies’ files. This time though, a researcher has found a bug in ransomware that allows to prevent encryption. The “popular” ransomware, like Conti, the revived REvil, the newcomer Black Basta, the highly active LockBit, or AvosLocker, all came with security issues that could be…

  • REvil ransomware is back?

    —

    by

    Cybersecurity Analyst
    in ,

    Back in January 2022 we were writing that REvil ransomware servers were seized by FBI and some of cyber criminals behind it have been arrested. However, less than four months later ransomware’s Tor page, “Happy blog”, came back to life. More surprisingly, REvil posted information about new victims: Visotec Group and Oil-india.com. It’s unclear whether…

  • REvil taken down by special FSB operation

    —

    by

    Cybersecurity Analyst
    in

    On January 15, 2022 FSB reported a successful operation on seizure of infamous ransomware gang behind REvil. We consider it to be a big win in cybersecurity world. REvil was a Russia-based private ransomware-as-a-service (RaaS) operation. After an attack, REvil would threaten to publish victim’s information on their darknet page Happy Blog unless the ransom was received. In a high profile case,…