%20(3).png){kind=small}
![TFD [LOGO] (10).png](https://static.wixstatic.com/media/bea252_c1775b2fb69c4411abe5f0d27e15b130~mv2.png/v1/crop/x_150,y_143,w_1221,h_1193/fill/w_179,h_176,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/TFD%20%5BLOGO%5D%20(10).png)
Russia's Most Aggressive Ransomware Gang Disappears: New York Times
- By The Financial District
- Jul 15, 2021
- 2 min read
Just days after President Biden called President Vladimir V. Putin of Russia and demanded that he act to shut down ransomware groups that are attacking American targets, the biggest of them has gone off-line. The mystery is who made that happen, David E. Sanger wrote for the New York Times.
The group, called REvil, short for “Ransomware evil,” is believed responsible for the attack that brought down one of America’s largest beef producers, JBS, and it took credit for a hack that affected thousands of businesses around the world over the July 4 holiday.
On Friday, describing his ultimatum to the Russian president, Mr. Biden said “we expect them to act,” and when asked later if he would take down the group’s servers if Mr. Putin did not, the president simply said, “Yes."
But that is only one possible explanation for what happened around 1 a.m. on Tuesday, when the group’s sites on the dark web suddenly disappeared. Gone was the publicly available “happy blog’’ that the group maintained, listing its victims, and internet security groups said the custom-made sites where victims negotiate with REvil over how much they will pay to get their data unlocked were also missing.
There were some theories floating around about why REvil, which seemed to revel in the publicity and reaped huge ransoms — including $11 million from JBS — suddenly disappeared.
One is that Mr. Biden ordered the United States Cyber Command, working with domestic law enforcement agencies, including the FBI, to bring it down. Cyber Command proved last year that it could do just that, paralyzing a ransomware group that it feared might turn its skills to freezing up voter registrations or other election data in the 2020 election.
The second theory is that Mr. Putin ordered the group taken down by Russia. If so, that would be a gesture toward heeding Mr. Biden’s warning, which he offered, in more general terms, when the two leaders met June 16 in Geneva.
