#iPhone13 #ransomware #Telegram

RaaS - notorious ransomware operators

Cyberthreats are evolving rapidly and becoming more sophisticated and complex. Operators leverage real-world events to deceive individual victims, enterprises and governments all over the globe. Ransomware Evil or REvil is one of the latest Ransomeware-as-a-service (RaaS) operators. This criminal group provides adaptable encryptors and decryptors, infrastructure and services for negotiation communications, and a leak site for publishing stolen data when victims don’t pay the ransom demand. As per the observation of cases, REvil and its affiliates pulled in an average payment of $2.25 million during the first six months of 2021. Last month, it extracted $11 million payment from the U.S. subsidiary of the world’s largest meat packing company based in Brazil, demanded $5 million from a Brazilian medical diagnostics firm and launched a large-scale attack on dozens, perhaps hundreds, of companies that use IT management software from Kaseya VSA.

Unit 42, a response-ready global team comprising threat researchers and cybersecurity consultants, has been monitoring threat actors involved in ransomware attacks and has worked over a dozen REvil cases so far this year. Ransomware is going to dominate the cybercrime landscape. A report prepared by Unit 42 and The Crypsis Group incident response and digital forensics firm, notified several disturbing threat trends. In 2020, the average ransom payment by organisations increased nearly threefold ($1,15,123 in 2019 to $3,12,493 in 2020); the highest ransom payment doubled ($5 million in 2019 to $10 million in 2020), and the highest ransomware demand also doubled ($15 million in 2019 to $30 million in 2020). Industry data indicated healthcare was the most targeted and vulnerable sector in 2020 and the sector continues to be under further attacks by RaaS models. The need of the hour is an integrated platform using machine learning and ar.