FBI held onto REvil decryptor for weeks before sharing with victims
The needs of many outweigh the needs of the few, reason agency sources
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
In a strange turn of event, it has emerged that the FBI had managed to get hold of REvil’s universalransomwaredecryptor key three weeks before sharing it with victims.
Although the agency has not officially confirmed the claims, an anonymous source told theWashington Post(WP) that the FBI withheld the keys so as to not tip off REvil.
“The questions we ask each time are: What would be the value of a key if disclosed? How many victims are there? Who could be helped? And on the flip side, what would be the value of a potential longer-term operation in disrupting an ecosystem? Those are the questions we will continue to have to balance,” reasoned the unnamed source.
We’re looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won’t take more than 60 seconds of your time, and we’d hugely appreciate if you’d share your experiences with us.
Click here to start the survey in a new window«
It appears the FBI was gearing to launch a campaign to take down the notorious ransomware. However, before the agency could make a move,REvil pulled the plugon its operations on its own accord.
My precious
The reports come aftercybersecurityfirmBitdefenderrecently released auniversal decryptorfor REvil victims, claiming to have made it together with a “trusted law enforcement partner” that it failed to identify.
Interestingly, the existence of a universal decryptor was first shared by a REvil representative, after the gang suddenly decided toget back into actionafter staying offline for nearly two months.
“One of our coders misclicked and generated a universal key, and issued the universal decryptor key along with a bunch of keys for one machine,” wrote REvil’s new representative in theRussian-post translatedby security researchers at Flashpoint.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Flashpoint researchers have observed REvil trying to rebuild its reputation with former collaborators, who weren’t pleased with their sudden disappearance, prompting security researchers tourge clients to bracefor a new round of REvil attacks.
VIaWashington Post
With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’sTechRadar Pro’sexpert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.
7 myths about email security everyone should stop believing
Best Usenet client of 2024
Another reason to avoid edge-lit 4K TVs: they may fail faster than others, according to this report