REvil Ransomware Network Connection

Ankit Mehta@Secvyn

•updated Jun 17, 2026•1•0•4

Detects network connections to URLs associated with the REvil ransomware family, including its payment and drop sites. This rule specifically looks for successful network connections.