Ransomware.live revil

Revil

Legend

General Icons

Screenshot available
Company website
Infostealer data found
Victim has denied
Ransom amount known

Sector Icons

Manufacturing

Construction

Transportation/Logistics

Technology

Healthcare

Financial Services

Public Sector

Education

Business Services

Consumer Services

Energy

Telecommunication

Agriculture and Food Production

Hospitality and Tourism

Not Found

Location Types

DLS: Data Leak Site
Files: Files server
Chat: Negotiation chat portal
API: Application Programming Interface endpoint
Admin: Admin panel or backend interface

Sodinokibi ransomware group also known as REvil (Ransomware Evil) operates as a ransomware-as-a-service (RaaS) model. After the group compromised his victims, they would threaten to publish the victim's sensitive data on their darknet blog named 'Happy Blog', unless the ransom is paid. The ransomware malware code used by REvil is pretty similar to the ransomware code used by DarkSide - a different threat actor. REvil group claims to steal information after a successful attack on the supplier of the tech giant Apple and stole confidential schematics of their upcoming products.

External information

Sodinokibi (aka REvil) Ransomware
https://analyst1.com/ransomware-diaries-volume-2/
https://www.cert.ssi.gouv.fr/uploads/CERTFR-2021-CTI-009.pdf
https://www.ic3.gov/Media/News/2021/210823.pdf

Victims

98

First Discovered

victim

2019-08-26

Last Discovered

victim

2022-11-28

Avg Delay

between attack and claim

N/A

Infostealer

for victim with domain

100.0%

View Victims on World Map

Known Locations (3)

Title	Available	Last Visit	FQDN
404 Not Found	No	2025-06-01 21:18:36	`dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion`
404 Not Found	No	2025-06-01 21:19:06	`aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion`
Blog	No	2025-06-01 21:19:14	`blogxxu75w63ujqarv476otld7cyjkq4yoswzt4ijadkjwvg3vrvd5yd.onion`

Screenshot Preview

Target (Available)

Top 5 Activity Sectors

Information Technology 13
Healthcare and Public Health 8
Food and Agriculture 6
Financial 5
Communication 5

Top 5 Countries

United States 29
Australia 4
United Kingdom 3
France 3
Germany 1

Heatmap (Available)

Ransom Notes (3)

revil1.txt
revil2.txt
revil3.txt

Tools Used (Available)

This information is provided by Ransomware-Tool-Matrix
Discovery	RMM Tools	Defense Evasion	Credential Theft	OffSec	Networking	LOLBAS	Exfiltration
AdFind Bloodhound placeholder	placeholder placeholder placeholder	placeholder placeholder placeholder	placeholder placeholder placeholder	Cobalt Strike placeholder placeholder	placeholder placeholder placeholder	BITSAdmin placeholder placeholder	PrivatLab RClone Sendspace

20201126 79 msgs

20210320 13 msgs

20210329 43 msgs

20210331 23 msgs

20210401 78 msgs

20210407 15 msgs

20210413 156 msgs

20210603 63 msgs

20210604 10 msgs

20210609 58 msgs

20210613 132 msgs

20210616 31 msgs

20210617 67 msgs

20210622 52 msgs

20210628 39 msgs

20210630 42 msgs

20210708 28 msgs

20210709 1 msgs

N/A

Sunknowledge Services Inc Revil

Discovery Date: 2022-11-28

N/A

medibank.com.au Revil

Discovery Date: 2022-11-07

N/A

Midea Group Revil

Discovery Date: 2022-09-01

N/A

Doosan Group Revil

Discovery Date: 2022-08-02

N/A

OptiProERP is a leading global provider of industry-specific ERP solutions for manufacture Revil

Discovery Date: 2022-07-25

N/A

Ludwig Freytag Group Revil

Discovery Date: 2022-05-12

N/A

Unicity International Revil

Discovery Date: 2022-05-03

N/A

Stratford University Revil

Discovery Date: 2022-04-22

N/A

Asfaltproductienijmegen Revil

Discovery Date: 2022-04-21

N/A

CYMZ Revil

Discovery Date: 2022-04-21

N/A

www.oil-india.com Revil

Discovery Date: 2022-04-21

N/A

Visotec Group www.visotec.com Revil

Discovery Date: 2022-04-20

N/A

PTT Exploration and Production - 720GB Revil

Discovery Date: 2021-10-15

N/A

ECKERD PERU S.A, INKAFARMA, MIFARMA Revil

Discovery Date: 2021-10-08

N/A

Join us on RAMP Revil

Discovery Date: 2021-10-07

N/A

Ronmor Holdings Revil

Discovery Date: 2021-10-01

N/A

Fimmick CRM Hong Kong (www.fimmick.com) Revil

Discovery Date: 2021-09-30

N/A

Fimmick CRM Honk Kong (www.fimmick.com) Revil

Discovery Date: 2021-09-30

N/A

Spiezle Architectural Group Inc. Revil

Discovery Date: 2021-09-16

N/A

ohiograting.com Revil

Discovery Date: 2021-09-11

N/A

Apex America Revil