Russia, UK Service Providers Tied to REvil Infrastructure
A screenshot of a negotiating portal set up by the REvil ransomware group (Source: SecurityScorecard) Threat intelligence researchers are looking closely at REvil, the ransomware gang that infected up to 1,500 companies in a single swoop. A look at part of the group's online infrastructure shows clear lines to Russian and U.K. service providers that, in theory, could help law enforcement agencies but don't appear eager to help. On July 2, affiliates of REvil exploited several vulnerabilities in remote management software called the Virtual System Administrator from Miami-based Kaseya. The U...