Tactics Tie Ransom Cartel Group to Defunct REvil Ransomware

Ransom Cartel ransomware-as-a-service operator blog claims to offer a new and improved version of REvil ransomware.

Although the REvil ransomware-as-a-service operation appeared to evaporate last October, analysts have found the groups influence is still considerable.
Notably, threat researchers from Unit 42 reported finding connections between REvil activities and that of
ransomware
group Ransom Cartel, an up-and-coming cybercrime group claiming to offer the same, yet improved software as REvil.
Following analysis, the Unit 42 team determined Ransom Cartel somehow was able to gain access to REvil ransomware source code. Ransom Cartel also mimics REvil tactics, including double extortion, Unit 42 added. However, the researchers said there are some aspects of the REvil operation that Ransom Cartel seems to lack.
Based on the fact that the Ransom Cartel operators clearly have access to the original REvil ransomware source code, yet likely do not possess the obfuscation engine used to encrypt strings and hide API calls, the Unit 42
ransomware report
explained, we speculate that the operators of Ransom Cartel had a relationship with the REvil group at one point, before starting their own operation.

Last News
▸ Beware EMV may not fully protect against skilled thieves. ◂ Discovered: 23/12/2024 Category: security	▸ Hack Your Hotel Room ◂ Discovered: 23/12/2024 Category: security	▸ Website hacks happened during World Cup final. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Tactics Tie Ransom Cartel Group to Defunct REvil Ransomware