New LV Ransomware Variant Hijacks Malicious Binaries Used by REvil Operators

The LV variant operators have been observed in the wild since October 2020, deploying a tweaked version of REvil’s binary with references to REvil’s C2 and data exfiltration infrastructure removed.