REvil Actor Accuses Russia of Planning 2021 Kaseya Attack

This report summarizes a DEF CON discussion and follow-up reporting about the REvil ransomware-as-a-service operation, highlighting the July 2021 Kaseya supply-chain attack that compromised VSA and affected over 1,000 downstream organizations. It reviews REvil's affiliate model, operational tradecraft (leak site use, dedicated comms, stable decryptors, outsourcing money laundering), the group's takedown timeline, and statements from a convicted affiliate who alleges Russian government involvement in orchestrating and executing the attack.