Well, this is big! The FSB arrests 14 members of the REvil Ransomeware gang across Russia!

[thewayne]

Normally the rule is that as long as you're based in Russia and you don't attack Russian and most Eastern European countries, that you're good. So what exactly happened here?

The Russian Federal Security Service (FSB) said today that it has raided and shut down the operations of the REvil ransomware gang. Raids were conducted today at 25 residents owned by 14 members suspected to be part of the REvil team across Moscow, St. Petersburg, Leningrad, and the Lipetsk regions. Authorities said they seized more than 426 million rubles, $600,000, and 500,000 euro in cash, along with cryptocurrency wallets, computers, and 20 expensive cars. The REvil gang is responsible for ransomware attacks against Apple supplier Quanta, Kaseya, and JBS Foods.

Apparently American and other country's pressure on Russia produced some results, at last! If this were a movie, Jason Bourne (or equivalent) would be sneaking into Russian hacker farms and wiping them out with a silenced pistol, but we don't do things like that. It will be interesting to see how these prosecutions and prison sentences play out.

https://therecord.media/fsb-raids-revil-ransomware-gang-members/

https://it.slashdot.org/story/22/01/14/154259/fsb-arrests-14-members-of-revil-ransomware-gang

Comments

[thewayne]

REvil made themselves really visible, most of the other gangs keep a much lower profile.  The nail that stands up....

[silveradept]

Yeah, that makes sense. It's a futile hope if what they want get out of this bust is people not remembering that a whole body of others have also set up in that country, assuming they're not GRU units or approved by them.