REvil Ransomware Gang Flexes Its Hiring Muscle With a $1 Million Deposit on a Hacking Hiring Website

Stu Sjouwerman | Oct 23, 2020

REvil Ransomware Nothing says ransomware is a profitable business more than throwing down a million dollars in an attempt to attract and hire the most talented hackers on the planet.

Just when you think you’ve seen everything, something like this shows up. A recent post on a Russian hacker forum from the group behind REvil ransomware sought out candidates who have experience with penetration testing, citing skills using the Metasploit Framework (MSF), Cobalt Strike, and Koadic open-source pen testing tool and windows rootkit.

The 99 bitcoins posted to the forum, valued at over $1 million, is a brilliant tactic that somewhat flaunts the successes the REvil gang have ad, and their ability to gainfully employ candidates.

It’s a pretty dangerous prospect when the bad guys have so much money they can afford to hire the most talented hackers today, rivaling even the largest global enterprises today.

Ransomware has already been on the rise this year and from the looks of the latest post from REvil and the assumed draw such a post can garner, the future of ransomware is going to be much worse for organizations.

Despite the assumed improvements REvil (and gangs like them) will have over the coming months, they still need one of your users to engage with an email, a website – something – to start the process of infecting one of your endpoints. Putting users through Security Awareness Training is an impactful way to minimize the likelihood a user will fall for phishing attacks and social engineering scams.

Ransomware has been evolving into full-blown data breach attacks, and looks to be moving even more in that direction. The time to prepare is now.

Topics: Ransomware

Ransomware Simulator

Free downloadable software tool

Threat actors are constantly coming out with new strains to evade detection. Is your network effective in blocking all of them when employees fall for social engineering attacks?

RanSim gives you a quick look at the effectiveness of your existing network protection. RanSim will test 24 ransomware infection scenarios and 1 cryptomining infection scenario and show you if a workstation is vulnerable.

RansIm-Monitor3Here's how it works:

  • 100% harmless simulation of real ransomware and cryptomining infections
  • Does not use any of your own files
  • Tests 25 types of infection scenarios
  • Just download the installer and run it
  • Results in a few minutes!

Get RanSim!

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.