FBI: REvil Ransomware Group Behind JBS Attack

The FBI has attributed a big ransomware attack on the world’s greatest meat processing firm to a notorious group believed to be Russian in origin.

In a temporary statement, the Feds blamed REvil (aka Sodinokibi) for the attack on Sao Paolo-headquartered JBS.

“We carry on to concentration our efforts on imposing risk and penalties and holding the liable cyber actors accountable. Our non-public sector partnerships are essential to responding promptly when a cyber intrusion takes place and giving assist to victims afflicted by our cyber-adversaries,” go through the assertion.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

“A cyber-attack on 1 is an attack on us all. We inspire any entity that is the victim of a cyberattack to straight away notify the FBI as a result of a person of our 56 industry places of work.”

The FBI explained it would be working to deliver the REvil group to justice for the hack on JBS.

REvil is one particular of the most prolific and successful teams all around nowadays, obtaining targeted organizations as assorted as Apple, Jack Daniels, Travelex and even a law firm connected to Donald Trump.

The ransomware variant was dependable for about 14% of attacks in Q1 2021, remaining at the major of the world-wide listing, in accordance to Coveware.

Having said that, it operates as most do these days by using an affiliate model, so it is unclear who really utilised the malware to attack JBS.

There is nonetheless no term from the meat processing huge on any of its public-going through websites about the attack.

While, as Infosecurity reported on Tuesday, it seems to have impacted the firm’s servers supporting its North American and Australian operations, which could have important knock-on results for the meat supply chain in those people areas.

Ronnen Brunner, VP of EMEA at ExtraHop, argued that meals provides could be considered critical countrywide infrastructure.

“Businesses can’t be shielded all the time, but these attacks realize success thanks to outdated systems and due to the fact quite a few organizations nevertheless rely on perimeter defence and signature detection tools. This signifies when the attacker is inside of the network, that firm is entirely vulnerable,” he included.

“Businesses will have to discover from the downfall of other folks. Visibility is essential for detecting ransomware quick more than enough to reply ahead of it really is far too late.”