logo

BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

ID: 1569d018-1324-5654-8003-12f3212a647a

STIX ID: report--1569d018-1324-5654-8003-12f3212a647a

Feed Name: The Hacker News

Threat Score
75/100

Date Published: 2026-04-06

Date Updated: 2026-04-24

Author: [email protected] (The Hacker News)

...
...

Germany's BKA has identified key individuals behind the REvil (Sodinokibi/GandCrab) ransomware-as-a-service operation, attributing 130 attacks in Germany to the group and reporting €1.9M in ransom payments across 25 cases with total damages exceeding €35.4M; the report also recounts REvil's evolution, major victims (including JBS and Kaseya), its 2021 disappearance, and subsequent law‑enforcement actions and arrests through 2024.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.