We often see hackers reusing the same malware, with only a few new adjustments to obfuscate the code so that it is more difficult for scanning tools to detect.

However, sometimes entirely new attack tools are created and deployed by threat actors who don’t want to rely on obfuscating existing malware.

Confusing Name – R_Evil vs REvil

REvil is a group of ransomware (primarily) that has targeted several high-profile victims throughout 2020 — but are probably most well known for their ransomware attack against Travelex, which netted them a $2.3 million ransom payout.

Continue reading R_Evil WordPress Hacktool & Malicious JavaScript Injections at Sucuri Blog.

Via Sucuri.net