GandCrab ransomware operation says it's shutting down GandCrab crew says it made enough money and plans to retire within a month June 1, 2019 https://www.zdnet.com/article/gandcrab-ransomware-operation-says-its-shutting-down/
Who’s Behind the GandCrab Ransomware? July 8, 2019 https://krebsonsecurity.com/2019/07/whos-behind-the-gandcrab-ransomware/
Is ‘REvil’ the New GandCrab Ransomware? July 15, 2019 https://krebsonsecurity.com/2019/07/is-revil-the-new-gandcrab-ransomware/
Post GandCrab, Cybercriminals Scouring the Dark Web for the Next Top Ransomware August 19, 2019 https://threatpost.com/post-gandcra...-dark-web-for-the-next-top-ransomware/147476/
Ransomware: New file-encrypting attack has links to GandCrab malware, say security researchers Analysis of the REvil code reveals strong links to GandCrab September 24, 2019 https://www.zdnet.com/article/ranso...to-gandcrab-malware-say-security-researchers/ Secureworks: REvil/Sodinokibi Ransomware
Sodinokibi Ransomware Builds An All-Star Team of Affiliates October 2, 2019 https://www.bleepingcomputer.com/ne...omware-builds-an-all-star-team-of-affiliates/ McAfee: McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service – The All-Stars
Sodinokibi Ransomware: Following the Affiliate Money Trail October 14, 2019 https://www.bleepingcomputer.com/ne...nsomware-following-the-affiliate-money-trail/ McAfee: McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service – Follow The Money
Tools and Tactics of the Sodinokibi Ransomware Distributors October 21, 2019 https://www.bleepingcomputer.com/ne...cs-of-the-sodinokibi-ransomware-distributors/ Mcafee: McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service – Crescendo
GandCrab RaaS Was a Training Ground for Malware Distributors November 1, 2019 https://www.bleepingcomputer.com/ne...s-a-training-ground-for-malware-distributors/
VB2019 paper: Different ways to cook a crab: GandCrab ransomware-as-a-service (RaaS) analysed in depth November 2019 https://www.virusbulletin.com/virus...rab-ransomware-service-raas-analysed-indepth/ Download (PDF - 6.27 MB): https://www.virusbulletin.com/uploads/pdf/magazine/2019/VB2019-Fokker-Mundo.pdf
New paper: Behind the scenes of GandCrab's operation January 20, 2020 https://www.virusbulletin.com/blog/2020/01/new-paper-behind-scenes-gandcrabs-operation/