REvil maintains several pages documenting its activities including one called the "happy blog". From a report it's not yet known if the sites were down temporarily or if the group -- or law enforcement -- took its websites offline.
Cybersecurity firm Recorded Future’s Allan Liska said it was too early to tell if REvil has gone for good, but none of its infrastructure can be found anywhere.
"It's too early too tell, but I've never seen ALL of their infrastructure offline like this. I can't find any of their infrastructure online. Their extortion page is gone, all of their payment portals are offline, as is their chat function." Liska said the websites went offline around 1 a.m. Eastern time.
It might be that the Russian authorities have cracked down on the ransomware antics of its cybercriminals. Putin’s own cybersecurity operations have always operated with plausible deniability with only the very stupid not believing where the attacks came from.
However lately the cyber crims have been getting above themselves and overtly acting like online Russian mafia operations, and even issuing statements to the media.