https://hexpysya.github.io/tags/revil/Recent content in REvil on bubka hacks stuffHugo -- gohugo.ioen-usTue, 07 Apr 2026 00:00:00 +0000https://hexpysya.github.io/blue_team/elk-revil/Tue, 07 Apr 2026 00:00:00 +0000https://hexpysya.github.io/blue_team/elk-revil/An administrator executed facebook assistant.exe on a Windows Server 2019 host, which dropped REvil ransomware (Sodinokibi), spawned a PowerShell process that deleted Volume Shadow Copies, and dropped ransom notes across multiple user profile directories.