REvil (ELF)

Aliases: REvix

Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 13:02:23

Targeted industries: technology-and-telecommunications healthcare-and-pharmaceutical financial-services government-and-public-sector

Context

ELF version of win.revil targeting VMware ESXi hypervisors.

Reports & references

  • Microsoft — Ransomware As A Service Understanding The Cybercrime Gig Economy And How To Protect Yourself (report)
  • fsb.ru — Single.Htm%21Id%3D10439388%40Fsbmessage (report)
  • analyst1.com — History Of Revil (report)
  • angle.ankura.com — Revix Linux Ransomware (report)
  • blogs.vmware.com — Esxi Targeting Ransomware The Threats That Are After Your Virtual Machines Part 1 (report)
  • cybersecurity.att.com — Revils New Linux Version (report)
  • cybleinc.com — Uncensored Interview With Revil Sodinokibi Ransomware Operators (report)
  • diicot.ro — 3341 Comunicat De Presa 2 08 11 2021 (report)
  • Trend Micro — Rpt Navigating New Frontiers Trend Micro 2021 Annual Cybersecurity Report (report)
  • github.com — Reconfig Linux (report)
  • home.treasury.gov — Jy0471 (report)
  • ke-la.com — Will The Revils Story Finally Be Over (report)
  • krebsonsecurity.com — Revil Ransom Arrest 6M Seizure And 10M Reward (report)
  • malienist.medium.com — Revix Linux Ransomware D736956150D0 (report)
  • otx.alienvault.com — 60Da2C80Aa5400Db8F1561D5 (report)
  • Microsoft — Re54L7V (report)
  • russian.rt.com — 926347 Barnaulec Rozysk Fbr Kibermoshennichestvo (report)
  • storage.courtlistener.com — Gov.Uscourts.Txnd.351760.1.0 3 (report)
  • storage.courtlistener.com — Gov.Uscourts.Txnd.352371.1.0 1 (report)
  • therecord.media — Us Arrests And Charges Ukrainian Man For Kaseya Ransomware Attack (report)
  • threatpost.com — 167511 (report)
  • threatpost.com — 167745 (report)
  • twitter.com — 1409499591452639242 (report)
  • twitter.com — 1452980772953071619 (report)
  • twitter.com — 1409601311092490248 (report)

External references