REvil Domains Hijacked, Forum Representative Announces Group’s Intention to Go Offline

This report outlines REvil (Sodinokibi)'s recent operational disruption: a 17 Oct 2021 forum post from a purported REvil representative claims parts of the group’s landing page/blog backend, backups and Onion service keys were accessed by an unknown third party, prompting a temporary halt and discussion of rebranding; the report also contextualizes REvil’s prior high-impact attacks (Kaseya, JBS), internal controversies, affiliate program issues, and concludes the group is likely to reappear despite reputational damage.