惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

IT之家
IT之家
Recent Announcements
Recent Announcements
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
The GitHub Blog
The GitHub Blog
MyScale Blog
MyScale Blog
爱范儿
爱范儿
GbyAI
GbyAI
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
美团技术团队
Y
Y Combinator Blog
博客园 - 叶小钗
Apple Machine Learning Research
Apple Machine Learning Research
Martin Fowler
Martin Fowler
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
罗磊的独立博客
M
MIT News - Artificial intelligence
博客园 - Franky
V
Visual Studio Blog
I
InfoQ
V
V2EX
Hugging Face - Blog
Hugging Face - Blog
腾讯CDC
博客园 - 司徒正美
L
LangChain Blog

Intel 471 Blog

TeamPCP Supply Chain Attacks Turning Geopolitical Tension into Actionable Intelligence CVE-2025-68613: Zerobot botnet exploits critical vulnerability impacting n8n AI orchestration platform Introducing Cyber Threat Exposure Bundle: A Unified Approach to External Risk CVE-2026-20127: Critical Cisco SD-WAN vulnerability exploited in wild Handala Threat Group OpenClaw: A viral AI assistant and a magnet for infostealer malware and ClickFix trickery Israeli, US strikes against Iran triggers a surge in hacktivist activity CVE-2026-1731: Finding a critical RCE in an age of AI-driven vulnerability research Born to bypass MFA: Taking down Tycoon 2FA The UK Cyber Security Resilience Bill How AI and the human advantage beat tomorrow’s threats Winter Olympics 2026: Hacktivism Surges Ahead of Protests and Suspected Sabotage How Threat Hunting and “Good” Metrics Help The Business Likely fake ransomware operator 0APT causes panic — Our analysis Hunting APTs: from state policy to TTPs CrazyHunter Ransomware DevMan Ransomware Introducing HUNTER Tuning: a New Tool for Driving Behavioral Threat Hunt Detections Battling check fraud in the U.S. Gootloader Malware Update Shai-Hulud Worm 2.0 New FvncBot Android banking trojan targets Poland White Paper Preview: Black "Fraud Day” and Beyond — The Key Cyber Threats Facing the Retail Sector this Holiday Season Threat hunting case study: Detecting IAB activity Using deception to extract cyber threat intelligence Lynx Ransomware Qilin Ransomware Group ClickFix: Tricking users into installing infostealers Cybercrime Takedowns: Trust, Partnerships and Focus
Alleged REvil member says gang has no fear over U.S. gove...
Intel 471 · 2021-06-05 · via Intel 471 Blog

A notorious ransomware gang says it’s no longer trying to avoid targets that are based in the United States, and despite the heightened focus from lawmakers, the group says it’s doubling its focus on U.S. targets.

In a short interview posted to the Russian OSINT Telegram channel that has since been deleted, an alleged representative of the REvil ransomware gang said the group was behind the attack on global food processing company JBS, but expected the damage to be contained to Brazil, since the company’s headquarters is based in São Paulo. The spokesperson said it had tried to avoid U.S. companies at large since the Colonial Pipeline ransomware incident.

“With the recent events in the fuel biz, we tried to stay away from the U.S, just like we don’t target the critical infrastructure,” the interview read. “The attack was against the company in Brazil, but it was the U.S. that got mad.”

Since the Colonial Pipeline hack, the U.S. government has been intensely focused on fighting ransomware. According to a Reuters report, the U.S. Department of Justice will start elevating investigations of ransomware attacks to a similar priority as terrorism in the wake of the Colonial Pipeline hack and mounting damage caused by cyber criminals. Additionally, U.S. President Joe Biden has said ransomware will be a topic of discussion with Russian President Vladimir Putin when the two meet on June 16.

In response to the Department of Justice action, the REvil spokesman said he plans to focus more intently on U.S. targets.

“Since there’s no point in avoiding the US targets anymore, we have lifted all the restrictions,” the alleged representative said. “From now on, every entity in this country can be targeted.”

The representative also said that they don’t believe the department’s action will stop them from conducting their attacks.

“We don’t want to play politics, but seeing as we are being dragged into it — well, alright then,” the representative said. “Even if the U.S. government passes the bill prohibiting ransom payments or puts us on the terrorist list, that’s not going to affect our operations. Quite the contrary, access to US companies will be sold for a song, and we’ll offer preferential terms to our affiliates.”

The interview comes as ransomware gangs have drawn enormous attention in the U.S. The Colonial Pipeline incident led to the shut down of one of the biggest oil pipelines in the U.S., leading to panicked drivers emptying thousands of gas stations on the East Coast.

Despite the scrutiny, the alleged representative said the attention has left the gang unfazed.

“Time will show. We are still here,” the representative said. “We are not going anywhere.”