The REvil ransomware gang is interviewed on the Telegram channel called Russian OSINT.
Cyber-criminals behind the JBS Foods ransomware attack claim they had no intention to target US-based firms. The group, identified as the Sodinokibi REvil ransomware gang, also explained that it was not afraid of being labelled a cyber-terrorist group.
Russian Interview
A spokesperson for REvil shared its views in an interview on a YouTube & Telegram channel called Russian OSINT early Fri. The validity of the REvil source cannot be independently confirmed, however the REvil ransomware gang has used the Russian OSINT channel several times to discuss criminal activities such as future targets, alliances & revenue.
The short Russian interview revealed that the cyber-criminal gang had originally focused its efforts on an unspecified Brazil-based entities. According to the REvil source, the gang was trying to stay away from the US & US-based firms.
Who is REvil?
The REvil group is widely believed responsible for the cyber-attack that took out operations at JBS Foods. The global food distributor has confirmed to the Biden administration it believes the REvil group is responsible for the attack.
REvil is known for both audacious attacks on the world’s biggest organisations & enormous ransoms. In April, it tried to extort Apple just hours before its new product launch, demanding a $50m extortion fee.
JBS Foods
As of Tues., JBS Foods outlined that they were able to resume shipping food from nearly all of its US facilities and making progress in resuming plant operations in the US & Australia. In response, the Biden administration criticised Russia.
“The White House is engaging directly with the Russian govt. on this matter & delivering the message that responsible states do not harbour ransomware criminals,” stated White House Press Secretary Karine Jean-Pierre in a Sun. interview.
Undeterred
Claims made by the REvil gang on the Russian OSINT channel included:
- The recent attack, impacting JBS Foods, was originally directed at a Brazilian entity.
- REvil does not understand why the US has intervened this time.
- The gang member warned that current US legislation, if passed, that would restrict ransomware victims from paying a ransom, would not be a deterrent for future attacks.
- The group is unafraid of being considered terrorists.
- The group originally restricted US targets in cyber-attacks.
In the interview the anonymous REvil gang member threatened that in light of US actions & posturing to retaliate for the JBS Foods attack, the group will now lift the restriction on attacking US targets.
https://www.cybernewsgroup.co.uk/virtual-conference-june-2021/
