One among the most prolific ransomware gangs in the world all of the sudden disappeared from the internet on Tuesday morning. The unexplained exodus comes just sooner or later earlier than senior officers from the White Home and Russia are scheduled to satisfy to debate the world ransomware disaster.

The ransomware crew referred to as REvil has existed for years in the booming cybercrime underground. A whopping 42% of all latest ransomware assaults hint again to this gang, however they’re identified for 2 hacks particularly. Earlier this month, the gang hit at the very least 1,000 companies by attacking the software program firm Kaseya. It was one in all the widest ransomware campaigns ever carried out. And final month, REvil hit the meat provider JBS and demanded cost of $11 million. Whilst world leaders turned their consideration to ransomware and threatened motion, REvil was defiant—till now.

“It’s a little bit of a large number as we scramble to determine what’s occurring,” says Allan Liska, senior menace analyst at the safety agency Recorded Future. “We’re cautiously optimistic that one in all the biggest gangs out there may be performed.” 

There are a number of attainable explanations for what induced in the present day’s shutdown. First, the gang itself might have chosen to retire in the event that they’ve made sufficient cash or felt an excessive amount of strain. The United States or its allies might have efficiently taken them offline. Or the Russian authorities, beneath worldwide scrutiny, might have pressured them to close down. Their disappearance may be short-term—many cybercriminals fake to “retire” earlier than ultimately reappearing beneath new identities.

“We advocate not leaping to any instant conclusions because it’s early, however REvil is, certainly, one in all the most ruthless and artistic ransomware gangs we’ve ever seen,” says Ekram Ahmed, a spokesperson at Test Level Software program.

The reply is unclear and the broader drawback of ransomware nonetheless looms giant.

“I do not know what this implies, however regardless, I am completely happy!” tweeted Katie Nickels, director of intelligence at the US agency Purple Canary. “If it is a authorities takedown – superior, they’re taking motion. If the actors voluntarily went quiet – glorious, possibly they’re scared. It is nonetheless necessary to do not forget that this does not remedy ransomware.”