Patch Tuesday: Microsoft patches a zero-day bug under active attack computing.co.uk - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from computing.co.uk Daily Mail and Mail on Sunday newspapers.
A screenshot of a negotiating portal set up by the REvil ransomware group (Source: SecurityScorecard)
Threat intelligence researchers are looking closely at REvil, the ransomware gang that infected up to 1,500 companies in a single swoop. A look at part of the group s online infrastructure shows clear lines to Russian and U.K. service providers that, in theory, could help law enforcement agencies but don t appear eager to help.
On July 2, affiliates of REvil exploited several vulnerabilities in remote management software called the Virtual System Administrator from Miami-based Kaseya.
The U.S. is pressing Russia for more cooperation in cracking down on ransomware criminals the U.S. alleges the country harbors. Pulling the threads around the decoder[dot]re domain might be a good place for the two countries to start.