IT-Mensch versus REvil - a live attack
The Sophos Managed Threat Response team in direct exchange with REvil ransomware. A specific case shows how the cybercriminals proceeded, how the Managed Threat Response (MTR) team finally gained the upper hand and what lessons companies should learn from the incident. Like many other ransomware families, the REvil blackmail software is used by cyber criminals to steal and encrypt data in order to subsequently demand the highest possible ransom. What makes REvil special, however, is the way the ransomware is made available. As if it were a completely normal business, the makers offer their "product" as a ...