Disappeared suddenly on Tuesday from internet the group of Russian speakers hacker REvil. In particular, according to cybersecurity experts, websites and websites linked to the group do not appear just a few days after the attack targeting Kaseya, the company for which REvil had claimed responsibility.
“All REvil sites are down,” said Lawrence Abrams, a cybersecurity expert and webmaster at Bleeping Computer. “The group representative is strangely silent,” he added.
In early July, REvil, also known as Sodinokibi, claimed responsibility for a lyrical attack on US intelligence firm Kaseya. It is estimated that the attack had compromised the data of more than 1,000 Kaseya customers.
Last Friday, US President Joe Biden had asked his Russian counterpart Vladimir Putin, during a telephone conversation, to take action against the attacks carried out by Russia, because otherwise the US would take “the necessary measures”.
“The days of those operating from Russia have been numbered since the Colonial pipeline network was hit,” Jake Williams, technical director of the cybersecurity company BreachQuest, commented on Twitter.
The latest REvil cyberattacks
It is noted that in early May, the Colonial oil pipeline network, the main source of gasoline supply for most of the eastern United States, was temporarily shut down following a redemptive attack. The network had paid $ 4.4 million to regain control of its facilities.
At the end of May, the giant meat company JBS was targeted, whose activities in Australia were paralyzed and the operation of some of its production lines in the United States was suspended. JBS had also paid a ransom of $ 11 million.
Analysts have suggested that the US military cyber-command center has the means to attack these pirates when national security is at stake, but no US official has ever confirmed this scenario.
“There is evidence that REvil has been the victim of a deliberate disruption to its infrastructure by its own operators, industry or authorities,” Mandt Threat Intelligence’s John Haltqvist told AFP. .
A recent IBM Security X-Force report named Sodinokibi the most formidable group of cybercriminals using cyberbullying, accounting for 29% of cyber-attacks in 2020.
Source: ΑΠΕ-ΜΠΕ
READ ALSO