Ransom Ledger

REvil

Also known as Sodinokibi

Behind the JBS payment and the Kaseya supply-chain attack, where it asked $70 million for a universal decryptor. Russia's FSB arrested members in January 2022; an affiliate who wrote the Kaseya attack was later jailed in the US.

What it is
Ransomware-as-a-service
Based
Russian-speaking
Active
2019–2022
Status
Defunct

On the record

  1. May 2024 · The Record

    Yaroslav Vasinskyi, who carried out the Kaseya attack, is sentenced to 13 years and seven months in the US

  2. Jul 2021 · BleepingComputer

    Coop shuts hundreds of Swedish supermarkets after the Kaseya attack

  3. Jun 2021 · CNBC

    JBS confirms it paid $11 million after the attack on its plants

In the ledger

$11 million paid in the one payment listed

  • Jun 2021JBS paid $11 million. Confirmed by the victim.

One outage listed

  • Jul 2021Kaseya VSA: Up to 1,500 businesses. Kaseya's count of businesses downstream of fewer than 60 directly compromised customers.
A Coop supermarket with its green sign on a wet autumn day
A Coop store in Västerhaninge, Sweden, 2022. Photo: AleWi, CC BY-SA 4.0.