reported REvil is a Russian-based organization which provides ransomware as a service. BleepingComputer received a sample of the ransomware used in REvil's attacks and says that they demand USD five million for the ransomed files to be decrypted, though it is unknown if every victim received a demand for that same amount. Fabian Wosar, Chief Technical Offier (CTO) at the Emimsoft security firm, said affected customers had received demands for USD 44,999. Swedish grocery chain was also affected by the attack, and had to close all 800 of its stores because its checkout tills could not process payments due to the ransomware.  Therese Knapp, a Coop spokesperson, said : "We have been troubleshooting and restoring all night, but have communicated that we will need to keep the stores closed today". Swedish company Visma Esscom, which manages servers for businesses, was using Kaseya software, according to Reuters. Railway services in Sweden were also disrupted. On Saturday, US President Joe Biden directed intelligence agencies to investigate who was behind the attack. He said that "we're not certain" who is behind the attack, adding " The  initial thinking was it was not the Russian government but we're not sure yet". The US stated that it is "taking action to understand and address the recent supply-chain ransomware attack".
reported REvil is a Russian-based organization which provides ransomware-as-a-service. BleepingComputer reported receiving a sample of the ransomware used in REvil's attacks and says that they demand USD five million for the ransomed files to be decrypted, though it is unknown if every victim received a demand for that same amount. Fabian Wosar, Chief Technical Offier (CTO) at the Emimsoft security firm, said affected customers had received demands for USD 44,999. Swedish grocery chain was also affected by the attack, and had to close all 800 of its stores because its checkout tills could not process payments due to the ransomware. Speaking to Swedish Television, Therese Knapp, a Coop spokesperson, said "We have been troubleshooting and restoring all night, but have communicated that we will need to keep the stores closed today". Swedish company Visma Esscom, which manages servers for businesses, was using Kaseya software, according to Reuters. Railway services in Sweden were also disrupted. On Saturday, US President Joe Biden directed intelligence agencies to investigate who was behind the attack. He said that "we're not certain" who is behind the attack, adding " t he initial thinking was it was not the Russian government but we're not sure yet". The US stated that it is "taking action to understand and address the recent supply-chain ransomware attack".
R
ransomware as a service. BleepingComputer received
ransomware-as-a-service. BleepingComputer reported receiving
A
Speaking to Swedish Television,
D
:
R
The
t
A
he