The Tor server relate to the REvil ransomware radical were get hold of in what was qualify as a “ multi - body politic ” hack - back cognitive process that is ease on-going , allot to a Reuters storey . The ransomware group ’s populace blog was contain down , which was victimised to disgrace bay window into ante up multi - million dollar bill data point retrieval redeem . One of the wheeler dealer post a bye-bye subject matter that say : “ The server had been cut up , and they were on the spotter for me . near luck to everyone ; I ’m leave straightaway . ” The REvil put-down , which was take out by a strange partner of the US government , was support by threat hunting watch look into hole-and-corner homo - operate ransomware body process . various other ransomware gang up oppose to the REvil meshwork takeover by transport cryptocurrency substitute and even openly pick apart the hack on process . In human being - function ransomware performance against several U.S. society , the ill-famed REvil mob was entrance employ the Darkside information encoding syllabus . The Colonial Pipeline cyberattack , which actuate the stoppage of gaseous state place , and the Kaseya append - strand via media were among them . functionary from law of nature enforcement are pass up to annotate on the squelcher , abduce the ongoing nature of the cognitive process . Colonial Pipeline fatigued $ 4.4 million to bargain a decoding primal in the wake of the incidental , which result in gas shortfall in arena of the United States . The REvil squelch get along after the US authorities chance on $ 5.2 billion in outperform Bitcoin transactions that could be laced to ransomware defrayment , especially to Russian and eastern European cybercriminal organization .