REvil Ransomware: What’s Next?

This blog post reviews REvil (Sodinokibi) ransomware activity and history, details notable operations (JBS, Kaseya, Acer, etc.), explains the ransomware-as-a-service model and extortion via a public leak site, and discusses the July 2021 Kaseya supply-chain incident where a reported zero-day and other CVEs were weaponized to impact roughly 1,500 customers, while exploring possible causes for the group's temporary disappearance.