REvil was a Russia-based or Russian-speaking private ransomware-as-a-service operation. After an attack, REvil would threaten to publish the information on their page Happy Blog unless the ransom was received. From Wikipedia
Rustam Rafailevich Gallyamov faces charges for operating the Qakbot botnet, which enabled global ransomware attacks and caused hundreds of millions in damages.
