Threat Actor

REvil

Also known as: Sodinokibi

Properties

summary
Armenia detained a Russian tourist on a U.S. extradition warrant related to alleged REvil ransomware activity, though defense lawyers dispute the identification.
first_seen
2026-07-20T04:00:24.148387+00:00
last_seen
2026-07-20T04:00:24.148387+00:00
created_at
2026-07-20T04:00:24.148387+00:00
mention_count
1
evidence_url
https://thehackernews.com/2026/07/armenia-detains-russian-tourist-on-us.html
target
multiple sectors globally
provenance
news-scan
scan_confidence
0.8
suspected_origin
Russia
status
pending

Explore this actor's full graph with Ninja Signal

REvil — Threat Actor Profile — Ninja Signal | Ninja Signal