Share this article

Ransomware Group REvil Strikes Again, Demands $70M in Bitcoin From 200 US Firms

The Russian-based ransomware group is now demanding bitcoin in exchange for a decrypter for the infected machines.

Updated Sep 14, 2021, 1:20 p.m. Published Jul 5, 2021, 5:44 a.m.
jwp-player-placeholder

Ransomware hacking group REvil brought the networks of at least 200 U.S. companies to their knees on Friday and is now demanding $70 million in bitcoin.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

  • Australia's ABC News reported on Saturday REvil had targeted software supplier Kaseya and used its network-management package to spread the ransomware via the cloud.
  • Over 1 million machines are said to be infected, according to various other reports.
  • The Russian-based ransomware group is now demanding the bitcoin in exchange for a decrypter for the infected machines.
  • "On Friday we launched an attack" on managed service providers, a post from the dark web site Happy Blog reads. "More than a million systems were infected."
  • In May, REvil attacked Colonial Pipeline and managed to get the company to pay a $5 million ransom after its functionality and services were restricted, sparking a gas crisis in the U.S.
  • JBS Holdings, the world’s largest meat company by sales, also paid an $11 million ransom in a May 30 attack against it by the same group.
  • During a Friday public appearance, President Joe Biden said he'd ordered U.S. intelligence agencies to investigate the attack, and he would take measures if Russia was behind it.

Read more: World’s Largest Meat Company Pays $11M in Bitcoin Ransomware Attack

Updated: July 5, 2021, 16:14 UTC: Information about President Biden's directive was added.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Japan’s Higher Rates Puts Bitcoin in the Crosshairs of a Yen Carry Unwind

Aerial view of Tokyo (Jaison Lin/Unsplash, modified by CoinDesk)

A stronger yen typically coincides with de-risking across macro portfolios, and that dynamic could tighten liquidity conditions that recently helped bitcoin rebound from November’s lows.

What to know:

  • The Bank of Japan is expected to raise interest rates to 0.75% at its December meeting, the highest since 1995, affecting global markets including cryptocurrencies.
  • A stronger yen could lead to de-risking in macro portfolios, impacting liquidity conditions that have supported bitcoin's recent recovery.
  • Governor Kazuo Ueda indicated a high probability of a rate hike, with officials prepared for further tightening if their economic outlook supports it.