The Ravil ransomware group distributed the previous evening 2.4 GB of Lady Gaga’s authoritative archives.
The criminal gathering behind the Ravil (Sodinokibi) ransomware is blackmailing a New York-based law office, taking steps to discharge delicate records on the organization’s VIP customers except if the firm pays an astounding $42 million payment request.
The blackmail endeavor is the aftereffect of a ransomware disease that Grubman Shire Meiselas and Sacks (GSMS) endured a week ago.
On May 7, Ravil administrators distributed a message routed to the GSMS staff on a dark web entry, taking steps to discharge documents about its customers, records the Ravil pack took from the law office’s inside system before scrambling its documents.
Screen captures distributed on the site implied that programmers took records relating to GSMS clients, incorporated any semblance of Lady Gaga, Madonna, Mariah Carey, Nicki Minaj, Bruce Springsteen, Bette Midler, U2, Outkast, Jessica Simpson, Cam Newton, Facebook, and that’s just the beginning.
GSMS affirmed the occurrence and the continuous blackmail endeavor on Monday, in an announcement to amusement news site Variety.
The programmers gave the organization seven days to arrange and pay the payment, time that terminated the previous evening when the programmers posted a second message on their website.
Ravil administrators said GSMS offered to pay just $365,000 of the $21 million they asked, and therefore, they were currently multiplying the payment request to $42 million.
Moreover, as discipline for the organization’s inability to pay in time, the Ravil group additionally discharged a 2.4 GB chronicle containing Lady Gaga authoritative reports, the majority of which were contracts for shows, marketing, and TV appearances.
n expansion to multiplying the payment request, programmers have additionally made another subtle provocation against the NY law office, taking steps to discharge records identified with US President Donald Trump. We quote from the Ravil site:
I hope you can understand a bit about the dark web and it’s important to learn all about the dark web before you enter the dark web. Because dark web is one of the most dangerous place in the history on the Internet. So don’t be afraid and you can enter to the dark web sites and get dark web links from our website.
There’s a political decision race going on, and we found a huge amount of grimy clothing on schedule. Mr. Trump, in the event that you need to remain, president, jab a sharp stick at the folks, else, you may overlook this aspiration until the end of time. Also, to you voters, we can tell you that after such a distribution, you positively would prefer not to consider him to be president. All things considered, how about we forget about the subtleties. The cutoff time is multi-week.
Nonetheless, prior today, amusement and tattle news site PageSix announced referring to sources that President Trump has never been a GSMS customer. In view of current open data, this would give off an impression of being only an unfilled danger, trying to squeeze the law office to pay the payoff request.
Ransomware groups that take information before scrambling casualty records systems is currently a typical sight. Twelve unique gatherings currently take part in this twofold coercion practice where the payment is for both unscrambling documents and for not discharging taken records.