REvil Ransomware Gang Spill Details on US Attacks

[silversurfer]

Cybercriminals behind the JBS Foods ransomware attack claim they had no intent to target United States-based firms. The group, identified as the Sodinokibi REvil ransomware gang, also said it was not afraid of being labeled a cyber-terrorist group.
 
A spokesperson for REvil shared its positions in an interview on a YouTube and Telegram channel called Russian OSINT early Friday. The validity of the REvil source cannot be independently confirmed by Threatpost, however the REvil ransomware gang has used the Russian OSINT channel several times to discuss criminal activities such as future targets, alliances and revenue.
 
The brief Russian-language interview revealed that the cybercriminal gang had originally focused its efforts on an unspecified Brazil-based entities. According to the REvil source, the gang was trying to stay away from the U.S. and U.S.-based firms.
 
The REvil group is widely believed responsible for the cyberattack that knocked out operations at JBS Foods. The global food distributor has confirmed to the Biden administration it believes the REvil group is responsible for the attack.
 
As of Tuesday, JBS Foods said they were able to resume shipping food from nearly all of its U.S. facilities and making progress in resuming plant operations in the U.S. and Australia. In response, the Biden administration admonished Russia.
 
“The White House is engaging directly with the Russian government on this matter and delivering the message that responsible states do not harbor ransomware criminals,” said White House Press Secretary Karine Jean-Pierre in a Sunday interview.

Read more: REvil Ransomware Gang Spill Details on US Attacks | Threatpost