Malware
REvil
- First Reported
- Oct 28, 2021
- Latest Reported
- Jul 25, 2025
Reported Context (2)
- as well as romance-themed lures. Epsilon Red was first observed in 2021 and is loosely inspired by REvil ransomware in ransom note styling, but otherwise appears distinct in its tactics and infrastructure. ClickFix Campaign Uses ActiveX to Deliver Epsilon Red Ransomware
- CTIR helped resolve several significant ransomware events this quarter, including ones that involved the REvil ransomware leveraging a vulnerability in the Kaseya VSA software (CVE-2021-30116) against managed service Talos Q3 2021 Report: Ransomware Dominated Incident Response Engagements
CVE (1)
Malware (12)
People (3)
Threat Actors (2)
MITRE ATT&CK (16)
Vendors (2)
Products (4)
Tools (8)
Industries (14)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.