{"id":298806,"date":"2021-07-14T16:35:29","date_gmt":"2021-07-14T13:35:29","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/russian-cyber-gang-blamed-for-global-ransomware-attack-disappears\/"},"modified":"2021-07-14T16:35:29","modified_gmt":"2021-07-14T13:35:29","slug":"russian-cyber-gang-blamed-for-global-ransomware-attack-disappears","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/russian-cyber-gang-blamed-for-global-ransomware-attack-disappears\/","title":{"rendered":"#Russian cyber gang blamed for global ransomware attack disappears"},"content":{"rendered":"

“#Russian cyber gang blamed for global ransomware attack disapp<\/a>ears<\/strong>”<\/p>\n

\n

REvil, the Russia-linked cyber gang blamed earlier this month for a massive ransomware attack that\u00a0affected hundreds of businesses globally, has vanished from the web. <\/p>\n

As of Tuesday morning,\u00a0the group\u2019s public website<\/a>,\u00a0the dark-web site <\/a>the gang used to facilitate its ransom negotiations and the site that victims used to pay the ransom fees were all offline, multiple cybersecurity analysts said. <\/p>\n

It\u2019s not clear what led to the Russia-linked ransomware-as-a-service group\u2019s websites going dark.<\/p>\n

But the sudden\u00a0outage\u00a0came just days after President Biden said he pressed Russian President Vladimir Putin to act against hackers that are operating from Russia.<\/p>\n

\u201cI made it very clear to him that the\u00a0United States\u00a0expects when a ransomware operation is coming from his soil, even though it\u2019s not sponsored by the state, we expect him to act,\u201d Biden told reporters last week after a call with Putin.<\/p>\n

Ransomware attacks, often orchestrated by Eastern European hacking groups, have surged over the past 18 months as the pandemic and work-from-home accommodations have made businesses especially vulnerable to cybercrime. <\/p>\n

\"US
Last week Biden said he would take down the group\u2019s servers if Putin failed to.<\/figcaption>
POOL\/AFP via Getty Images<\/span><\/figcaption><\/figure>\n

Last month, JBS Foods, the world\u2019s largest meat supplier, was hit by a ransomware attack that the FBI accused REvil of orchestrating. JBS eventually paid an $11 million ransom to resolve the attack, which threatened to disrupt US meat supply. <\/p>\n

And earlier this month, REvil claimed to be behind a sweeping ransomware attack that disrupted operations at hundreds of companies around the world. The hackers targeted software company Kaseya and demanded $70 million in Bitcoin as ransom. <\/p>\n

Rep. John Katko, the top Republican on the House Homeland Security Committee, called the attack a \u201cmoment of reckoning\u201d in US-Russia relations.<\/p>\n

\u201cOnly weeks after President Biden sat down with Putin and allegedly talked a tough game<\/a> with Russia, hackers from Russia again attacked thousands of U.S. companies, compromising our nation\u2019s critical infrastructure,\u201d the top-ranking House Homeland Security Committee Republican said.<\/p>\n

\u201cAdversaries like Russia are creating safe havens for bad actors and we must project strength,\u201d the New York lawmaker added.<\/p>\n

\"Kaseya'\"
Software company Kaseya was targeted by REvil earlier this month.<\/figcaption>
REUTERS<\/span><\/figcaption><\/figure>\n

The sites linked to REvil could have gone dark for a variety of reasons, cybersecurity analysts said. It\u2019s unclear if the group took their own sites down or whether law enforcement from any country intervened. <\/p>\n

Last week, after Biden said that the US expects Russia to act against the group, a reporter asked Biden if he would take down the group\u2019s servers if Putin failed to.<\/p>\n

\u201cYes,\u201d the president said.<\/p>\n

In addition to REvil\u2019s websites, \u201call of their infrastructure\u201d used to control their hacking operations is also dark, Allan Liska, an intelligence analyst who tracks ransomware for the cybersecurity firm Recorded Future, told Politico<\/a>.<\/p>\n

The REvil episode comes after another ransomware gang that was believed to be based in Russia, DarkSide, attacked Colonial Pipeline,\u00a0spurring\u00a0gas shortages\u00a0and panic buying\u00a0across the Southeast US in May. <\/p>\n

The company that operates the pipeline paid about $4.3 million in ransom to the group, but the Justice Department announced last month that it was able to recover the payment and shutter the group.\n <\/p><\/div>\n