REvil Ransomware Gang’s Web Sites Shut Down

Last night, the websites and infrastructure used by the REvil ransomware operation mysteriously went offline.

Giving clarity to the unfolding event, the LockBit ransomware representative while posting to the XSS Russian-speaking hacking forum noted that it is rumored that the REvil gang erased their server following a government order.

While it is not unheard of for REvil sites to lose connectivity for some time, in this case, the shutting down of all the sites seems rather unusual.

The post stated in Russian and translated to English by Advanced Intel’s Vitali Kremez explained, “Upon uncorroborated information, REvil server infrastructure received a government legal request forcing REvil to completely erase server infrastructure and disappear. However, it is not confirmed.”

This latest update could be related to the major ransomware attack on Kaseya that occurred earlier this month.

For more information, read the original story in Bleeping Computer.

Top Stories

Related Articles

May 31, 2025 A coordinated supply chain attack has compromised between 500 and 1,000 e-commerce websites by exploiting vulnerabilities in 21 more...

May 31, 2025 A widely used open-source Go library, easyjson, used in healthcare, finance and even defence has come under scrutiny more...

May 31, 2025 (EDITORIAL) A messaging tool used by Trump administration officials to archive encrypted Signal messages has been hacked — more...

April 22, 2025 Anthropic, a leading artificial intelligence company, anticipates that AI-powered virtual employees could begin operating within corporate networks as more...

Jim Love

Jim Is and author and pud cast host with over 40 years in technology.