revil

· InactiveSodinokibi ransomware group also known as REvil (Ransomware Evil) operates as a ransomware-as-a-service (RaaS) model. After the group compromised his victims, they would threaten to publish the victim's sensitive data on their darknet blog named 'Happy Blog', unless the ransom is paid. The ransomware malware code used by REvil is pretty similar to the ransomware code used by DarkSide - a different threat actor. REvil group claims to steal information after a successful attack on the supplier of the tech giant Apple and stole confidential schematics of their upcoming products.

Victims

Status

Inactive

Sites

Countries Hit

Profile

[Sodinokibi (aka REvil) Ransomware](https://thedfirreport.com/2021/03/29/sodinokibi-aka-revil-ransomware/)

https://analyst1.com/ransomware-diaries-volume-2/

https://www.cert.ssi.gouv.fr/uploads/CERTFR-2021-CTI-009.pdf

https://www.ic3.gov/Media/News/2021/210823.pdf

Top Countries

US48

GB7

Unknown6

AU4

DE4

HK3

CN3

CA2

TW2

FR2

Top Sectors

Information Technology12

Manufacturing10

Healthcare and Public Health8

Food and Agriculture6

Recent Victims

View all 96 →

kusd.edu

US · Education

Nov 28, 2022

Sunknowledge Services Inc

—

Nov 28, 2022

medibank.com.au

AU · Healthcare

Nov 7, 2022

Midea Group

CN · Manufacturing

Sep 1, 2022

Doosan Group

KR · Manufacturing

Aug 2, 2022

OptiProERP is a leading global provider of industry-specific ERP solutions for manufacture

— · Manufacturing

Jul 25, 2022

Ludwig Freytag Group

— · Professional Services