The operators behind the REvil ransomware group have resurfaced after allegedly closing shop following the widespread attack on Kaseya that caused thousands of victims on July 4. Security researchers said all of the dark web sites for the prolific ransomware group -- including the payment site, the group's public site, the 'helpdesk' chat and their negotiation portal -- went offline on July 13 after the Kaseya attack drew worldwide condemnation and tough threats from US lawmakers.
Read the article: ZDNet
