REvil Ransomware Gang Flexes Its Hiring Muscle With a $1 Million Deposit on a Hacking Hiring Website

Stu Sjouwerman | Oct 23, 2020

REvil Ransomware Nothing says ransomware is a profitable business more than throwing down a million dollars in an attempt to attract and hire the most talented hackers on the planet.

Just when you think you’ve seen everything, something like this shows up. A recent post on a Russian hacker forum from the group behind REvil ransomware sought out candidates who have experience with penetration testing, citing skills using the Metasploit Framework (MSF), Cobalt Strike, and Koadic open-source pen testing tool and windows rootkit.

The 99 bitcoins posted to the forum, valued at over $1 million, is a brilliant tactic that somewhat flaunts the successes the REvil gang have ad, and their ability to gainfully employ candidates.

It’s a pretty dangerous prospect when the bad guys have so much money they can afford to hire the most talented hackers today, rivaling even the largest global enterprises today.

Ransomware has already been on the rise this year and from the looks of the latest post from REvil and the assumed draw such a post can garner, the future of ransomware is going to be much worse for organizations.

Despite the assumed improvements REvil (and gangs like them) will have over the coming months, they still need one of your users to engage with an email, a website – something – to start the process of infecting one of your endpoints. Putting users through Security Awareness Training is an impactful way to minimize the likelihood a user will fall for phishing attacks and social engineering scams.

Ransomware has been evolving into full-blown data breach attacks, and looks to be moving even more in that direction. The time to prepare is now.

Topics: Ransomware

Test Your Network’s Defenses with our Free Ransomware Simulator

When employees bypass guidance and fall for social engineering, your network security is the last line of defense. Run our 100% harmless RanSim tool on Windows 10+ workstations to safely simulate 25 ransomware and cryptomining infection scenarios, pinpoint technical vulnerabilities, and get your results in minutes.

Launch Your Free Ransomware Simulation

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.