Revell is one of the most known cybercrime organized groups that started their criminal activity with a Ransomers Service project.

They have coordinated and organized with the aim of recruiting affiliates and through their affiliates to infect compromise computer systems of large organizations.

When we first saw the Gun Krab Ransomware, it was something quite unique, something quite new at that time.

Welcome to the Europol podcast, the official podcast of the EU Agency for Law Enforcement Cooperation.

In this series, we shine a light on some of the biggest operations Europol has supported

and how we continue to fight organised crime.

Ransomware, your money or your files.

Thank you. Ransomware, your money or your files. Cybercrime causes all kinds of havoc, from power outages to crippling financial losses.

It's a top priority for police forces in the European Union and for the investigators here at Europol as well.

But nowadays, it's not only the tech-savvy criminals that law enforcement needs to watch for.

Cybercrime services can now be purchased by paying a user fee, a rental fee, or a percentage of the criminal profits.

Cybercriminal networks offer tools such as malware, ransomware, and distributed denial of service,

or DDoS, attacks online, especially on the dark web.

This business model is known as crime as a service, and it makes criminal services easily available to anyone, lowering the level

of technical expertise previously required to perform specific activities. The crime as a service model

allows the developers and the affiliates to share the criminal profits. In this episode, we're going to

talk about a cybercriminal network called Revel,

and an operation that saw Europol and its partners take down several prolific affiliates

who were using Revel's services. Revel was a notorious ransomware group, and their

ransomware as a service business model was quite straightforward.

Step 1. Revel operators develop a type of malware called ransomware, which encrypts files

until a ransom is paid. Step 2. Revel's affiliates then pay to use the ransomware and

...