0
indicators on this record
Properties
- Summary
- Armenia detained a Russian tourist on a U.S. extradition warrant related to alleged REvil ransomware activity, though defense lawyers dispute the identification.
- First seen
- 2026-07-20T04:00:24.148387+00:00
- Last seen
- 2026-07-20T04:00:24.148387+00:00
- Created at
- 2026-07-20T04:00:24.148387+00:00
- Mention count
- 1
- Origin source
- suspected_origin
- Evidence url
- https://thehackernews.com/2026/07/armenia-detains-russian-tourist-on-us.html
- Resolution basis
- exact name match to existing RansomwareGroup 'revil'
- Target
- multiple sectors globally
- Resolution method
- automatic
- Provenance
- news-scan
- Rule version
- 2026-09-12.1
- Resolution rule
- R2_name_matches_known_actor
- Resolved at
- 2026-09-12T04:34:24+00:00
- Scan confidence
- 0.8
Explore this actor's full graph with Ninja Signal