{
	"id": "6360d470-69f9-4125-b460-0408c93e5548",
	"created_at": "2026-04-06T00:22:07.742897Z",
	"updated_at": "2026-04-10T03:22:11.346469Z",
	"deleted_at": null,
	"sha1_hash": "903b3f6d27dd1df7aa50048ea20f3d0d98010e87",
	"title": "REvil ransomware deposits $1 million in hacker recruitment drive",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 3674633,
	"plain_text": "REvil ransomware deposits $1 million in hacker recruitment drive\r\nBy Lawrence Abrams\r\nPublished: 2020-09-28 · Archived: 2026-04-05 17:57:23 UTC\r\nThe REvil Ransomware (Sodinokibi) operation has deposited $1 million in bitcoins on a Russian-speaking hacker forum to\r\nprove to potential affiliates that they mean business.\r\nMany ransomware operations are conducted as a Ransomware-as-a-Service (RaaS), where developers are in charge of\r\ndeveloping the ransomware and payment site, and affiliates are recruited to hack businesses and encrypt their devices.\r\nAs part of this arrangement, the ransomware developers receive a 20-30% cut, and an affiliate gets 70-80% of the ransom\r\npayments they generate.\r\nhttps://www.bleepingcomputer.com/news/security/revil-ransomware-deposits-1-million-in-hacker-recruitment-drive/\r\nPage 1 of 4\n\n0:00\r\nhttps://www.bleepingcomputer.com/news/security/revil-ransomware-deposits-1-million-in-hacker-recruitment-drive/\r\nPage 2 of 4\n\nVisit Advertiser websiteGO TO PAGE\r\nThe REvil RaaS is a private operation, which means that potential affiliates are vetted and interviewed before they are\r\nallowed to join the program.\r\nREvil deposits $1 million on a hacker forum\r\nIn an update to a forum post that they use to recruit affiliates, REvil announced today that they are once again recruiting new\r\naffiliates to distribute their ransomware.\r\nAs part of this recruitment drive, REvil is looking for teams of skilled hackers at penetration testing or experienced\r\nindividuals.\r\n\"1. Teams that already have experience and skills in penetration testing, working with msf / cs / koadic, nas / tape, hyper-v\r\nand analogues of the listed software and devices;\r\n2. People who have experience, but do not have access to work;\"\r\nTo show potential affiliates that they mean business, REvil has deposited 99 bitcoins, or approximately $1 million, on the\r\nhacker forum.\r\nUpdate to REvil recruitment post\r\nThis hacker forum allows members to deposit bitcoins into a wallet hosted by the site. Members can see other members'\r\ndeposits, and the deposited bitcoins can be used to privately buy and sell illicit services or data through the forum.\r\nAs you can see below, the public-facing representative of REvil, known as Unknown, now has 99 bitcoins deposited on the\r\nhacker forum.\r\n99 bitcoin deposit\r\nThis deposit illustrates how much money ransomware operations are generating as they are publicly making a $1 million\r\ndeposit as if it is not a big deal.\r\nhttps://www.bleepingcomputer.com/news/security/revil-ransomware-deposits-1-million-in-hacker-recruitment-drive/\r\nPage 3 of 4\n\nFurthermore, this deposit shows that they are not too concerned that the forum administrators could steal it.\r\nAs the hacker forum's owner manages the members' bitcoin wallets, the owner could pull an exit scam and abscond with the\r\nbitcoins.\r\nUnfortunately, until victims refuse to pay multi-million dollar ransoms, this type of cybercrime with continue, and the threat\r\nactors will become richer.\r\nThx to Damian for the tip!\r\nAutomated Pentesting Covers Only 1 of 6 Surfaces.\r\nAutomated pentesting proves the path exists. BAS proves whether your controls stop it. Most teams run one without the\r\nother.\r\nThis whitepaper maps six validation surfaces, shows where coverage ends, and provides practitioners with three diagnostic\r\nquestions for any tool evaluation.\r\nSource: https://www.bleepingcomputer.com/news/security/revil-ransomware-deposits-1-million-in-hacker-recruitment-drive/\r\nhttps://www.bleepingcomputer.com/news/security/revil-ransomware-deposits-1-million-in-hacker-recruitment-drive/\r\nPage 4 of 4",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://www.bleepingcomputer.com/news/security/revil-ransomware-deposits-1-million-in-hacker-recruitment-drive/"
	],
	"report_names": [
		"revil-ransomware-deposits-1-million-in-hacker-recruitment-drive"
	],
	"threat_actors": [],
	"ts_created_at": 1775434927,
	"ts_updated_at": 1775791331,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/903b3f6d27dd1df7aa50048ea20f3d0d98010e87.pdf",
		"text": "https://archive.orkl.eu/903b3f6d27dd1df7aa50048ea20f3d0d98010e87.txt",
		"img": "https://archive.orkl.eu/903b3f6d27dd1df7aa50048ea20f3d0d98010e87.jpg"
	}
}