“We are living proof you can do evil and get off scot-free.”
The infamous May 2019 message from ransomware group GandCrab may have claimed to be a farewell, but today it reads more like a warning. GandCrab had, in 2 years, claimed to have collected over $2 billion in extortion payments before announcing its “retirement”. Today, cybercrime group REvil—also known as Sodinokibi—seemingly follows in its footsteps, with some security experts believing that the black hat group is a restructuring of GandCrab with the intention of operating with a smaller, more exclusive base of users to reduce their criminal footprint.
