Understanding REvil: The Ransomware Gang Behind the Kaseya Attack

In most cases, the REvil ransomware group utilizes Cobalt Strike BEACON and RDP with previously compromised credentials to laterally move throughout compromised environments.