Skip to content

Ghosts of REvil: An Inside Look with the Hacker Behind the Kaseya Ransomware Attack

Jon DiMaggioJohn Fokker

Watch on DEF CON media

This recording is not on YouTube. The button opens the file on the DEF CON media server.

Summary

Yaroslav Vasinskyi was sentenced in 2024 to 13 years in U.S. federal prison for his role in the Kaseya ransomware attack. Threat researcher Jon DiMaggio spoke with him by phone and email over the following year. John Fokker, formerly a Dutch cybercrime investigator on operations against REvil, joins the talk. They describe how REvil operated, what happened in the Kaseya attack, and how the crew came apart. The speakers page also says the session includes new information on leadership that remains at large.

Materials

Related talks