REvil Ransomware Gang Starts Auctioning Victim Data
Summary: The REvil ransomware group used its Dark Web "Happy Blog" to announce its first stolen data auction, offering three databases and more than 22,000 files allegedly taken from a Canadian agricultural production company that had declined its extortion demands. The auction page set a minimum deposit of $5,000 in virtual currency and a starting price of $50,000, an escalation from the group's prior practice of publishing a handful of stolen files to pressure victims.
Key Takeaway: A Chainalysis report cited in the article found ransomware payments decreased significantly after the COVID-19 crisis intensified in the U.S. and Europe in early March, and the auction is a sign gangs are hunting new ways to extract value from victims who can no longer pay - while some groups now charge a second fee to delete stolen data, a double vig.
Read the original at Krebs on Security ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·