An anonymous reader quotes a report from The New York Times: The perpetrators of a ransomware attack that shut down some operations at the world’s largest meat processor this week was a Russian-based cybercriminal group known for its attacks on prominent American companies, the F.B.I. said Wednesday. The group, known as REvil, is one of the most prolific of the roughly 40 ransomware organizations that cybersecurity experts track and has been identified as responsible for a coordinated strike against operations in almost two dozen Texas cities in 2019. The group is among dozens of ransomware groups that enjoy safe harbor in Russia, where they are rarely arrested or extradited for their crimes.
REvil, which stands for Ransomware Evil, is known as a “ransomware as a service” organization, meaning it leases its ransomware to other criminals, even the technically inept. One of its previous affiliates was a group called DarkSide, which was responsible for the ransomware attack last month on Colonial Pipeline, a conduit for nearly half the gas and jet fuel to the East Coast. DarkSide is believed to have split off from REvil last year. REvil is considered one of the most sophisticated ransomware groups and has demanded as much as $50 million to recover data belonging to companies as prominent as Apple. Its attack on JBS, a Brazilian company that accounts for roughly a fifth of cattle and hog slaughter in the United States, temporarily shut down some operations at a time when prices were already surging for beef, poultry and pork. Jen Psaki, the White House press secretary, declined to say whether the U.S. government was planning to retaliate. “We’re not taking any options off the table in terms of how we may respond, but of course there is an internal policy review process to consider that,” she said. The administration is planning to bring up the issue with President Vladimir Putin of Russia when they meet in two weeks.
“Responsible states do not harbor ransomware criminals,” she added.
Read more of this story at Slashdot.
Source: Slashdot – Russian Cybercriminal Group Was Behind Meat Plant Attack, FBI Says