REvil ransomware gang returns after two-month hiatus

Cyber Protect Cloud

Two months after shutting down, the notorious ransomware gang REvil seems to have resumed its operations.

REvil made a lot of news with their "big game" victims over the years, but their recent attack on Kaseya VSA — in which they asked for a $50 million ransom — is one of the largest to date.

Researchers noted that shortly after the attack on Kaseya VSA, much of REvil's infrastructure went dark. Now that new samples of REvil are being detected, it's strongly believed the gang is back in business.

While REvil is adept at extracting large amounts of money from victims, Acronis Cyber Protect's Active Protection still recognizes their ransomware and stops it before you become another statistic.