AT&T Alien Labs has identified four of these samples in the wild during the last month. The threat actors behind REvil ransomware have expanded their arsenal to include Linux. The new Linux version has similarities to the Windows version, which has impacted companies such as JBS, Acer, Travelex, and French Connection this week. REvil is also known as Sodinokibi or Sodin. It is a ransomware family operated as a ransomware-as-a-service (RaaS)”]
Source: https://cybersecurity.att.com/blogs/labs-research/revils-new-linux-version