Ransomware-as-a-service operation REvil, aka Sodinokibi, went dark in July. The group’s latest disappearing act – only its second – occurred this week. A user claims to be a REvil administrator posted Sunday that its Tor hidden services had been hijacked. The third party has backups with onion service keys, the administrator said, noting that for the time being the group would remain “offline” Revil’s latest reappearance may be a carefully orchestrated law enforcement maneuver, LockBitSupp says.”]
Source: https://www.cuinfosecurity.com/blogs/ransomware-soap-opera-continues-revils-latest-outage-p-3129