REvil Crushed By Enforcement Using ‘Compromised Backups’

Several countries that work together to address the problem or cyber attacks, have recently took down the REvil Ransomware gang using one of the gang’s favorite tactics of compromised backups.

According to Reuters, “The FBI in conjunction with Cyber Command, the Secret Service, and like-minded countries, have truly engaged in significant disruptive actions against these groups.”

Previously, the FBI had hacked REvil’s servers and received a universal decryption key after Kaseya’s attack.

Holding onto the key, however, proved crucial, as it allowed the FBI and its collaborators to penetrate deep into REvil’s operations, as it also ensured that their software remained hidden in backups recently used by gang member “0 _ neday” to restore operations after initially going offline four days ago.

IT World Canada Staff
IT World Canada Staff
The online resource for Canadian Information Technology professionals.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

ITW in your inbox

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

More Best of The Web