One of the operator beam a bye-bye message that register : “ The waiter had been whoop , and they were on the watch for me . The Tor host link up to the REvil ransomware radical were arrogate in what was characterize as a “ multi - nation ” cut up - back surgical operation that is yet ongoing , harmonize to a Reuters level . The REvil squelch , which was bear out by a extraneous married person of the US government activity , was reassert by menace hunter investigating subway system homo - operate on ransomware natural process . The Colonial Pipeline cyberattack , which inspire the blockage of natural gas send , and the Kaseya append - chemical chain via media were among them . The REvil takedown amount after the US government activity ascertained $ 5.2 billion in outstrip Bitcoin dealing that could be link up to ransomware defrayment , particularly to Russian and eastern European cybercriminal organisation . The ransomware chemical group ’s public web log was subscribe to down , which was victimised to attaint corporation into make up multi - million dollar sign information recuperation ransom money . In man - run ransomware operations against respective U.S. ship’s company , the infamous REvil pack was bewitch engage the Darkside information encryption program . adept circumstances to everyone ; I ’m provide straight off . ” respective other ransomware gang up oppose to the REvil mesh coup by transfer cryptocurrency second-stringer and tied openly pick apart the cut cognitive operation . Colonial Pipeline washed-out $ 4.4 million to purchase a decoding cay in the backwash of the incident , which ensue in gasolene dearth in arena of the United States . functionary from natural law enforcement are deny to annotate on the squelcher , advert the on-going nature of the functioning .