Sodinokibi Ransomware Builds An All-Star Team of Affiliates

[[correlate]]

Content source

https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-builds-an-all-star-team-of-affiliates/

The Sodinokibi Ransomware (REvil) has been making news lately as they target the enterprise, MSPs, and government entities through their hand-picked team of all-star affiliates. These affiliates appear to have had a prior history with the GandCrab RaaS and use similar distribution methods.

It should be noted that we will refer to this ransomware infection as Sodinokibi as that is what it is most commonly known as to the general public and victims. This ransomware also goes under the name REvil, which is the actual name given by the malware developers.

Sodinokibi Ransomware Builds An All-Star Team of Affiliates

The Sodinokibi Ransomware (REvil) has been making news lately as they target the enterprise, MSPs, and government entities through their hand-picked team of all-star affiliates. These affiliates appear to have had a prior history with the GandCrab RaaS and use similar distribution methods.

www.bleepingcomputer.com

 

[oldschool]

So this HackMafia really is in the franchising business like MacDonalds, with outlets everywhere and tracking to identify the most valuable franchisees. This is very smart but may also provide a means for authorities to break up or put a big dent in the distribution chain or business model.