Remove 2013 Remove Cryptocurrency Remove Internet Remove System Administration
article thumbnail

REvil Ransom Arrest, $6M Seizure, and $10M Reward

Krebs on Security

million in cryptocurrency sent to another REvil affiliate, and that the U.S. Prosecutors say Vasinskyi was involved in a number of REvil ransomware attacks, including the July 2021 attack against Kaseya , Miami-based company whose products help system administrators manage large networks remotely. 3 was Lublin, Poland.

article thumbnail

How Did Authorities Identify the Alleged Lockbit Boss?

Krebs on Security

NEROWOLFE A search on the ICQ number 669316 at Intel 471 shows that in April 2011, a user by the name NeroWolfe joined the Russian cybercrime forum Zloy using the email address d.horoshev@gmail.com , and from an Internet address in Voronezh, RU. 2011 said he was a system administrator and C++ coder. “P.S. . “P.S.

article thumbnail

Ransomware Gangs and the Name Game Distraction

Krebs on Security

After acknowledging someone had also seized their Internet servers, DarkSide announced it was folding. REvil’s last big victim was Kaseya , a Miami-based company whose products help system administrators manage large networks remotely. Department of Justice. Bogachev was way ahead of his colleagues in pursuing ransomware.