▲ 193 points
back
167 comments
I wonder if this is related to "Ukraine: 'Massive cyber attack' shuts down government websites" [0] [1].
If this was Russia, then they would probably use the REvil "arrests" as a proof that they don't engage in Cyberwarfare, but rather help the world become a better place by cleaning up the Cyberspace.
Edit: TBH, that Twitter video in the other comment looks pretty serious.
[0] https://news.sky.com/story/ukraine-says-massive-cyber-attack...
[1] https://therecord.media/hackers-deface-ukrainian-government-...
I don't think anyone (including the Russians themselves) think this can be used as proof they don't engage in cyberwarfare. That's like saying that because the FBI (or whoever deals with cybercrime in the US) arrested some domestic hacking group on US soil, the NSA doesn't do any offensive hacking in other countries. No one would think that, so why should anyone think that of Russia?
Or they could just want the money...
>Authorities said they seized more than 426 million rubles, $600,000, and €500,000 in cash, along with cryptocurrency wallets, computers, and 20 expensive cars.
I don't understand why something like arresting criminals has to be immediately seen as part of some sinister scheme. What's wrong with "cleaning up the cyberspace" being exactly that?
I can't help but marvel at how terrible the OpSec on display is here.
Hoards of cash in drawers and bags?
Open laptops with logged in crypto accounts?
Maybe they only showed the few dummies on the team that didn't follow protocol, but all it takes is one idiot to ruin the whole "teamwork" vibe...
@1:20 guy is squatting while counting the money.
Do police always film their raids? I doubt it. This almost seems like a TV show. My propaganda spidey sense is going off.
For those wondering if anyone is going to be extradited, they won't be. Under Russian law, a Russian citizen cannot be extradited to another country. As long as these people are Russian citizens they will remain in Russia.
Who was wondering if they are gonna be extradited? Why would they? Unless they are obviously American (which they obviously aren't), I don't see why anyone would expect or even wonder if they would be extradited.
They're going to get a new job, working for the FSB.
I am incredibly surprised that they would arrest a cybercrime gang largely targeting people outside of Eastern Europe. My impression was that such crime was tolerated as long as it wasn't directed inwards.
It generally is, but you need to quell the flames from time to time. When it became a liability for Russia, likely from the high profile attacks over the past 12 months, you have to act.
My guess is:
- No one is extradited.
- Sentences, if any, are minimal.
- Whatever data collected by these guys is now in the hands of RU intelligence.
- The smarter/competent ones are recruited.
The raids are also interesting because you don't see the same flamboyance we saw from eastern European carders after their raids. Wheres the pet tiger? And the foreign sports cars? I'm curious if perhaps this was a raid on the lower level personnel.
Or maybe this was completely staged and none of these people are associated with REvil at all.
In addition, REvil and some other crews have targeted some Chinese companies. China has a different relationship with Russia compared to the US and Russia. China grumbling can probably get more results. Adding that to the reasons in the article means that certain ransomware gangs have become too toxic right now and need to be reined back in.
This has gotta be related to the Russia's recent demands to Nato on Ukraine and resulting negotiations [1]. They yield here, the counterpart yields there.
REevil arrest is just a token of good will, probably in exchange for something.
There's no downside to arresting them.
You seize their assets. You seize their talent and force them to work for the FSB. ...and you get to pretend to the world that you crack down on international hackers.
It's only upside for Russia.
See -> Ukraine/NATO situation and negotiations
So is is ARE-Evil, or is it REEvil? I've never heard it spoken by anyone, getting my news in written form these days.
I keep saying Resident Evil in my head
I've heard it said both ways on the news today, but I'm leaning towards R-Evil.
r/evil
It is REE-vil.
Neither. It’s REvil.
re-evil?
That's an interesting timing given the bigger context.
Sure, the right hand does not talk to the left hand most of times and there's a "separation of concerns", still, there might be something to it.
Anyway, this is an important step in fighting cybercrime.
Yes, this must surely be a concession or a "show of good faith" from the recent U.S.-Russia summit.
From here, Russia (Putin) can either prosecute or release the members depending on how the talks go.
> “Representatives of the competent US authorities were informed about the results of the operation,” the agency said.
That’s a nice thing to say. Respect for your adversary, trolling or mistranslation?
Competent Authority is a legal term referring to the agency/group that has authority in the given area.
A poor translation. From Russian wikipedia [1]:
"""
Competent authorities are executive authorities endowed with jurisdiction and power to perform any specific tasks (“competence” here means “the right to make decisions”).
"""
[1] https://ru.wikipedia.org/wiki/%D0%9A%D0%BE%D0%BC%D0%BF%D0%B5...
Understand "relevant".
What's trolling about that?
Hopefully we'll see an improvement in the relations between Russia and the West.
It will be interesting to see how the (alledgedly mostly russian) ransomware industry fares after this new development.
I pity the guy who just paid a ransom 5 minutes before the raid. No bitcoins, and no data, and customer service is not available.
I was surprised to see how poorly they lived given how much ransoming had been done. Truly living beneath their means.
Likely about the same fate as WWII German Rocket Scientists - Keep doing the same work for a different boss.
The FSB plays for keeps, I would not want to be in their shoes. Wonder what they did to piss off the Russian government, it would have to be something like that, as long as they are just ripping off Western Europe and the USA it seems that they were allowed to operate.
seems like low level folks, the real hackers are sitting in moscow city towers
The question is: What happens with the whole amount of money seized by FSB?
"New recruits for GRU. Good." - Putin
The funniest part:
> charged with committing crimes under Part 2 of Art. 187 ‘Illegal circulation of means of payment’
> The raid comes after President Biden and US authorities have pressured Russian President Vladimir Putin repeatedly over the summer to crack down on the Russian underground cybercrime ecosystem, which harbors many of today’s top ransomware crews.
Oof. After that call Putin must've forgot to tell the FSB to not lift a finger for a while, because you just know his American colleagues will jump at the chance to credit this to themselves.
Predictably, it's happening.
I wonder what changed… they definitely did not try to hide. I bet they did something against Putin or refused to do something.
And regarding extradition- if I’m in their shoes I will plead to be extradited to the US.
The higher one is in politburo the deeper one’s grave is.
They missed their regular payment to Putin.
> The FSB, which serves as Russia’s internal intelligence agency, said it conducted its operation at the request of US authorities
This needs to be understood through the Ukraine/NATO crisis lens.
Carrot and stick.
Show that you can act both in a "good" or "bad" way.
Fake news. Show us some proof. Can’t trust words anymore