Researchers noted that the leak site and other sites connected to the REvil ransomware group are back online, suggesting the group’s resurgence after it disappeared following the Kaseya attack. It is also suggested that the threat actor’s servers could have been turned on by mistake or due to the actions of law enforcement.

By admin