REvil Ransomware Network Connection

Ankit Mehta@Secvyn

•updated Jun 17, 2026•0•0•1

Detects network connections to URLs associated with the REvil ransomware family, including its payment and drop sites. This rule specifically looks for successful network connections.