Sodinokibi ransomware group also known as REvil (Ransomware Evil) operates as a ransomware-as-a-service (RaaS) model. After the group compromised his victims, they would threaten to publish the victim's sensitive data on their darknet blog named 'Happy Blog', unless the ransom is paid. The ransomware malware code used by REvil is pretty similar to the ransomware code used by DarkSide - a different threat actor. REvil group claims to steal information after a successful attack on the supplier of the tech giant Apple and stole confidential schematics of their upcoming products.
| Favicon | Title | Type | Available | Last Visit | FQDN | Screenshot |
|---|---|---|---|---|---|---|
 |
404 Not Found | 🔴 | 2025-01-28 10:00:52.308336 | dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion | N/A | |
 |
404 Not Found | 🔴 | 2025-01-28 10:01:15.181742 | aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion | N/A | |
 |
Blog | 🔴 | 2025-01-28 10:01:45.648688 | blogxxu75w63ujqarv476otld7cyjkq4yoswzt4ijadkjwvg3vrvd5yd.onion | N/A |
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| AdFind | Cobalt Strike | BITSAdmin | PrivatLab | ||||
| Bloodhound | RClone | ||||||
| Sendspace |
This information is provided by Ransomware-Tool-Matrix
| Name | # Msg | Initial Ransom | Negotiated Ransom | Paid |
|---|---|---|---|---|
| 20201104 | 63 | N/A | N/A | |
| 20210709 | 1 | N/A | N/A | |
| 20210603 | 63 | $2,500,000 | $400,000 | |
| 20210613 | 132 | $1,000,000 | $300,000 | |
| 20201014 | 72 | $7,500,000 | $1,270,000 | |
| 20210708 | 28 | N/A | N/A | |
| 20210622 | 52 | $100,000 | $35,000 | |
| 20210401 | 78 | $170,000 | $100,000 | |
| 20210329 | 43 | N/A | N/A | |
| 20210609 | 58 | $300,000 | $50,000 | |
| 20210617 | 67 | N/A | N/A | |
| 20210616 | 31 | $500,000 | $280,000 | |
| 20210604 | 10 | N/A | N/A | |
| 20210331 | 23 | N/A | N/A | |
| 20210413 | 156 | N/A | N/A | |
| 20210407 | 15 | N/A | N/A | |
| 20210628 | 39 | N/A | N/A | |
| 20210320 | 13 | N/A | N/A | |
| 20201126 | 79 | N/A | N/A | |
| 20210630 | 42 | N/A | N/A |
This information is provided by Valéry Marchive & Julien Mousqueton
| Employees(s) | Customer(s) | Third Party Employee(s) |
|---|---|---|
This information is provided by HudsonRock
