There’s a Clear Line From the REvil Ransomware to Russia

Two Companies Have REvil Data. They Don’t Appear Eager to Help.
Threat intelligence researchers are looking closely at REvil, the ransomware gang that infected 1,500 companies and organizations in a single swoop. A look at the group’s online infrastructure shows clear lines to Russian and U.K. service providers that in theory could help law enforcement.