Ransomware group that carried out major attacks reappears after brief absence

A Russian-speaking cybercriminal group responsible for a series of ransomware attacks on major US firms brought some of its infrastructure back online this week in a sign that it could be back in business, according to cybersecurity experts.

Payment portals and a victim-shaming website used by the so-called REvil group had been quiet since the hackers claimed responsibility for a July ransomware attack on IT provider Kaseya that affected an estimated 1,500 businesses around the world. "Currently, we have not observed any new victims, but ultimately the group is back to make money as ransomware is very profitable," said Adam Meyers, senior vice president of intelligence at security firm CrowdStrike.