The Federal Security Service (FSB), Russia’s intelligence service, claims to have dismantled hacking collective REvil.
REvil operated out of the country and battered international companies with ransomware attacks throughout 2021.
The statement by the FSB is rather short, but it details that the police carried out raids at 25 addresses and that 14 people have been apprehended.
A total of RUB 426m (US$5.60m) has been seized in the raids along with 20 luxury vehicles. Authorities also seized cash and computer equipment.
REvil has orchestrated some of the most crippling attacks on businesses in the US, prompting President Joe Biden to seek a global coalition against the group and calling his Russian counterpart to discuss measures.
REvil has demanded more than $70m in Bitcoin (BTC) ransom, attacking as many as 200 US companies.
It managed to infiltrate the systems of IT firm Kaseya and paralyze millions of systems. While REvil arguably went under after the Kaseya attack, they resurfaced shortly after, posting recruitment messages on hacker forums.
However, enthusiasm cooled off a little as the intensity of attacks prompted the US to treat REvil as a terrorist organization, entailing all the penalties that this involves.
REvil chose to collect payments in BTC exclusively in a bid to cover its tracks, but it didn’t quite succeed according to the FSB.