The ransomware operators REvil (Sodinokibi) have launched an auction site similar to eBay, where they plan to sell data stolen from hacked companies.
Let me remind you that at the moment, REvil operators are known as one of the most active and aggressive extortionist groups whose operations are aimed at corporate goals. Hacking companies, ransomware kidnaps and then encrypts victims' files and asks for huge amounts of money as ransoms. At the beginning of this year, it was reported that on average, hackers extort US $ 260,000 from companies.
REvil also has its own darknet website, where ransomware publishes “probes” of files stolen from companies, as well as full dumps with stolen data if victims refuse to pay.
Now the group announced on its blog that it was launching new functionality on the site and opening its own auction, which would allow monetizing the stolen data, and not publish it for free, as hackers have done so far.
The first lot at a hacker auction will be files stolen from a Canadian agricultural company that was hacked last month and refused to pay a ransom. The starting price for the data will be $ 50,000, and the winner will have to pay in the Monero cryptocurrency, which REvil operators switched to in April, considering Bitcoin not safe enough.
To make bids, for each auction you need to register separately, and after registration you will need to make a deposit of 10% of the starting price of the lot. They promise that at the end of the auction this amount will be returned.
Apparently, the idea of creating their own auction was born by hackers after hacking the law firm Grubman Shire Meiselas & Sack, which we discussed in detail earlier. Let me remind you that the clients of this company are dozens of world stars, including Madonna, Lady Gaga, Elton John, Robert de Niro, Nicki Minaj, U2 and so on.
In May 2020, attackers had already promised to auction information related to Madonna, saying that the starting price of the "lot" would be $ 1,000,000. Now the REvil operators write that they remember this and will soon fulfill their promise.