Proving Seriousness, Russia Arrests REvil Crew Who Carried Out Ransomware Attacks On US

REvil Group sending ransomware attack on US arrested by Russian Police. (photo: pixabay)

JAKARTA - Russia has carried out a special operation against the REvil ransomware crime group at the request of the United States. According to the FSB's domestic intelligence service, they have now arrested and charged members of the group, on Friday, January 14.

The arrests are a rare real demonstration of collaboration between Russia and the United States. Especially at a time of high tension between the two over the Ukraine issue. The announcement came even as Ukraine responded to a massive cyberattack that shut down government websites, although there was no indication the incident was REvil-related.

According to the FSB, in carrying out the arrests, the joint Russian Police and FSB operations searched 25 addresses, detaining 14 people. They also listed the seized assets, including 426 million rubles, 600,000 US dollars, 500,000 euros, computer equipment, and 20 luxury cars.

Russia has notified the United States directly about the action it is taking against the group wanted by Washington, the FSB said on its website. The US Embassy in Moscow could not immediately comment on the matter.

"Investigative measures are based on requests from ... the United States," the FSB said, as quoted by Reuters. "... Organized criminal associations no longer exist and the information infrastructure used for criminal purposes is neutralized."

TV channel REN showed footage of agents raiding homes and arresting people, pinning them to the floor, and confiscating large piles of Russian dollars and rubles. Members of the group have been charged and could face up to seven years in prison.

A source familiar with the case told Interfax that group members with Russian citizenship would not be handed over to the United States.

The United States said in November it was offering a reward of up to $10 million for information leading to the identification or location of anyone holding a key position in the REvil group.

The United States has been hit by a series of high-profile hacks by cybercriminals seeking ransom. A source with direct knowledge of the matter told Reuters in June that REvil was suspected of being the group behind a ransomware attack against the world's largest meatpacking company, JBS SA.

Washington has repeatedly accused the Russian state of carrying out malicious activity on the internet, a claim Moscow has denied.

Russia's announcement comes during a standoff between the United States and Russia. Moscow demands Western guarantees including that NATO will not develop further. They have also been building up troops near Ukraine.