NIAS Area Studies


PAKISTAN READER

Photo Source: Kapersky.com
   NIAS Course on Global Politics
National Institute of Advanced Studies (NIAS)
Indian Institute of Science Campus, Bangalore
For any further information or to subscribe to GP alerts send an email to subachandran@nias.res.in

Cyber Security
REvil is dead. Long live REvil

  Jeshil J Samuel

Though REvil might be gone (for now), their legacy in the Ransomware-as-a-Service industry will undoubtedly live on.

On 13 June, cybercriminal group REvil disappeared from the internet. REvil’s official dark websites and services were shut down without any notice or message from the group. This perplexing shutdown came ten days after REvil had orchestrated one of the biggest ransomware attacks in history by infiltrating US-based IT firm Kaseya. The attack affected around 1500 companies in 17 countries.

On 22 June, IT firm Kaseya announced that they had received a universal decryption tool for the REvil ransomware from a third party. Though it is still unknown who the party is, there is a possibility of it being an affiliate of REvil who had access to the decryption tool. Cybersecurity firm Emsisoft confirmed that the decryption tool does decrypt data encrypted by the REvil ransomware. Kaseya and Emsisoft have joined hands to help victims who were unable to decrypt their data even after paying the ransom (due to the faulty decryption tool provided by REvil earlier).

The news on REvil’s exit has brought out two pertinent questions. What led to REvil’s sudden exit, and what are the evident changes in the Ransomware-as-a-Service industry with REvil gone?

Reasons for REvil’s exit
First, the possibility of a Russian crackdown. One of the most prominent theories is that Russia has decided to stop supporting cybercriminal groups like REvil after US President Joe Biden warned his Russian counterpart about ransomware attacks originating from Russia during the Geneva summit. President Biden’s warning of retaliatory cyber-attacks for any attack originating from Russia could have forced the Russian government to rethink its strategy in abetting ransomware groups. After the Kaseya attack, President Biden had even made a call to President Putin regarding the seriousness of the issue.

Second, the timely intervention of the FBI and Interpol. Both the FBI and Interpol have worked together in the past to bring down large cyber-crime groups, so a target like REvil would not be new to them. The strategy used by both law enforcement agencies has been effective in controlling cyber-attacks originating from Europe. Rather than going after all assets belonging to a ransomware group, these law enforcement agencies target their financial accounts or command and control servers, leaving the groups inoperable. If either one of these agencies has managed to catch an affiliate of REvil,  then it is wiser for the group to quit before all its affiliates are pursued.

Third, the Avaddon strategy. Avaddon was a ransomware gang operating at the same scale as REvil..The gang decided to close their operations in June after having profited from the ransomware business. As they released their statement to leave the business, Avaddon also gave away the decryption tools for their ransomware for free.  Although unlikely, REvil might be following Avaddon’s path.  Owing to the JBS and Kaseya attacks, REvil are the most wanted group of cybercriminals in Europe. Thus, REvil would benefit from quietly stepping down from business.

Changes in the ransomware business
REvil has been one of the most successful and influential players in the ransomware business since its inception in 2019. In 2019 they accounted for nearly 10 per cent of all ransomware attacks globally, and in 2020 REvil operators announced that they had made USD 100 million from their ransomware-as-a-service business. They have also set the standard for large-scale ransomware attacks along with highly sophisticated ransomware creations. With the sudden departure of such a large player, we could see a few changes in the ransomware-as-a-service industry.

First, the rise of new ransomware groups. When large ransomware groups decide to shut down operations, they usually disintegrate and end up forming new groups. REvil itself is a good example of this. In 2018, when ransomware group GrandCrab decided to end their operations, they disintegrated themselves, which led to the formation of new groups like REvil and DarkSide.  Therefore, REvil’s exit is guaranteed to bring new ransomware groups into the picture. REvil’s affiliates would eventually become the clientele for such new groups as well.

Second, a change in strategy. With the amount of international pressure put on REvil after the JBS and Kaseya attack, ransomware groups would surely be shifting their operations from Europe and North America to other parts of the world, such as Asia and Oceania. Ransomware groups would target small and medium-sized businesses more frequently than massive industries to keep a low profile. They are also to most likely not accommodate their affiliates targeting critical infrastructures or supply chains in developed countries though the pay-outs would be high.

Third, the closing gap between the law and cybercriminals. On 15 July, the US Department of State announced a USD 10 million reward to anyone who would be willing to give information on cybercriminals targeting critical infrastructures. Bounties are incentives towards stopping ransomware groups with a large number of affiliates who look for higher pay-outs. Law enforcement agencies in Europe and the US have become more robust and cooperative in tackling such threats. Lawmakers around the world have also acknowledged the need for tighter rules and regulations in cyberspace. All these countermeasures, along with the exit of REvil, could push a few prominent ransomware groups into retirement. If Russia did indeed withdraw support for cybercriminals, then the golden age of ransomware gangs from Russia might come to an end.

REvil’s exit might be a ploy to trick law enforcement agencies. Still, with the rising pressure on ransomware gangs, there would not be a favourable environment for them to operate if they decide to return. REvil’s exit would also leave a power vacuum in the ransomware business that many would compete to fill. However, it is worth noting that REvil revolutionized the ransomware industry, and though they might be gone, their ideas will continue to dominate the industry.

Print Bookmark

August 2026 | CWA # 2241

Urja R Kudalkar | Urja R Kudalkar is a postgraduate student at the Department of Public Policy, Ramaiah University of Applied Sciences, RUAS, Bengaluru. She is currently a research intern at the National Institute of Advanced Studies (NIAS), Bengaluru.

The Board of Peace Plan for Gaza:
August 2026 | CWA # 2235

Adwaith Sankar | Adwaith Sankar is an undergraduate student pursuing Political Science and International Liberal Studies through the NUS-Waseda Double Degree Programme. He is currently an intern at NIAS.

Southeast Asia (April-June 2026)
August 2026 | CWA # 2232

Dattesh D Parulekar | Dr Dattesh D. Parulekar is an Assistant Professor at the School of International and Area Studies, Goa University.

Latin America (Apr-Jun 2026):
August 2026 | CWA # 2226

Nithin V | Nithin V is a postgraduate student in International Relations, with an interest in geopolitics, international political economy, and climate governance. He is currently an intern at the National Institute of Advanced Studies (NIAS), Bengaluru.

Colombia's ban on Female Genital Mutilation:
August 2026 | CWA # 2222

Namrata L Ghanghatkar, Priyanka Makhijani and Urja R Kudalkar | Namrata L Ghanghatkar, Priyanka Makhijani, Urja R Kudalkar are postgraduate students at the Department of Public Policy, Ramaiah University of Applied Sciences. They are currently Research interns at the National Institute of Advanced Studies (NIAS)

Peru's new President Netanyahu's Washington visit
July 2026 | CWA # 2217

Namrata L Ghanghatkar, Priyanka Makhijani, Urja R Kudalkar | Namrata L Ghanghatkar, Priyanka Makhijani, Urja R Kudalkar are postgraduate students at the Department of Public Policy, Ramaiah University of Applied Sciences. They are currently Research interns at the National Institute of Advanced Studies (NIAS)

The Berlin Pride attack
July 2026 | CWA # 2216

Manikranth Chakravarthula | Manikranth Chakravarthula is a doctoral student at the Conflict Resolution and Peace Research Programme, School of Conflict and Security Studies, National Institute of Advanced Studies, Bengaluru.

The Houthis:
July 2026 | CWA # 2213

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant at the National Institute of Advanced Studies. Bengaluru

The US-Iran War, Week 22:
July 2026 | CWA # 2211

Priyanka Makhijani | Priyanka Makhijani is a postgraduate student at the department of Public Policy, School of Social Science, Ramaiah University of Applied science. She is currently an intern at NIAS.

AI's Rogue Agent Breach:
July 2026 | CWA # 2210

Adwaith Sankar | Adwaith Sankar is an undergraduate student pursuing Political Science and International Liberal Studies through the NUS-Waseda Double Degree Programme. He is currently an intern at NIAS.

ASEAN Regional Forum:
July 2026 | CWA # 2209

Namrata L Ghanghatkar | Namrata L Ghanghatkar is a postgraduate student at the Department of Public Policy, Ramaiah University of Applied Sciences, Bengaluru. She is currently a research intern at the National Institute of Advanced Studies (NIAS).

The return of US-Canada Tariff Tensions:
July 2026 | CWA # 2208

Madhura Meenakshi Tanikella | Madhura Meenakshi Tanikella is an undergraduate student from the Department of Political Science, School of Liberal Arts, Alliance University, Bengaluru. She is currently an intern at NIAS.

The US-Saudi Arabia Nuclear Cooperation Agreement:
July 2026 | CWA # 2204

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant at the National Institute of Advanced Studies (NIAS), Bengaluru.

The Houthis target Saudi Arabia:
July 2026 | CWA # 2203

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant at the National Institute of Advanced Studies (NIAS), Bengaluru.

US-Iran War, Week 21:
July 2026 | CWA # 2197

Madhura Meenakshi Tanikella | Madhura Meenakshi Tanikella is an undergraduate student from the Department of Political Science, School of Liberal Arts, Alliance University, Bengaluru. She is currently an intern at NIAS.

The US-Iran War, Week 20:
July 2026 | CWA # 2195

Radhika M Agarwal | Radhika M Agarwal is a an internt at NIAS and also a postgraduate student at the Department of Politics and International Relations in Pandit Deendayal Energy University, Gandhinagar.

The C5+1 Critical Minerals Dialogue: 
July 2026 | CWA # 2189

Dhivya KM | Dhivya K M is an intern at NIAS and is also a postgraduate student from the Department of Financial Economics, Madras School of Economics, Chennai.

The IMF World Economic Outlook: 
July 2026 | CWA # 2184

Deb Dutta | Deb Dutta completed his graduation from the Department of Political Science, Sir Aurobindo International Centre of Education (SAICE), Puducherry. He is currently an intern at NIAS.

UNHCR Global Trends Report 2025: 
July 2026 | CWA # 2180

Madhura Meenakshi Tanikella | Madhura Meenakshi Tanikella is an undergraduate student from the Department of Political Science, School of Liberal Arts, Alliance University, Bengaluru. She is currently an intern at NIAS.

Iran after Ali Khamenei
July 2026 | CWA # 2177

Deb Dutta | Deb Dutta completed his graduation from the Department of Political Science, Sir Aurobindo International Centre of Education (SAICE), Puducherry. He is currently an intern at NIAS.

PM Takaichi's India visit: 
July 2026 | CWA # 2174

Yesasvi Koganti | Yesasvi Koganti is an undergraduate student at the Department of Political Science, Madras Christian College, Chennai. She is also an intern at NIAS, Bengaluru. 

The Israel-Lebanon Framework:
July 2026 | CWA # 2172

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant with the Global Politics team at the Science, Technology and International Relations (STIR) Programme at the National Institute of Advanced Studies (NIAS), Bengaluru.

The US-Iran negotiations:
June 2026 | CWA # 2164

Shreya Upadhyay | Dr Shreya Upadhyay is an Assistant Professor at Christ (deemed to be) University, Bengaluru, and Fellow, Kalinga Institute of Indo-Pacific Studies.

The United States (April-June 2026)
June 2026 | CWA # 2159

Madhura Meenakshi Tanikella | Madhura Meenakshi Tanikella is an undergraduate student from the Department of Political Science, School of Liberal Arts, Alliance University, Bengaluru. She is currently an intern at NIAS.

The US-Iran MoU
June 2026 | CWA # 2151

Rohini Reenum | Rohini Reenum is a doctoral student at NIAS. She is working on Governance in Areas Beyond National Jurisdiction using the case study of the BBNJ Agreement.

Israel's Ultra-Orthodox Jews:
June 2026 | CWA # 2149

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant with the Global Politics team at the Science, Technology and International Relations (STIR) Programme at the National Institute of Advanced Studies (NIAS), Bengaluru.

The US-Iran MoU:
June 2026 | CWA # 2136

Acsah H | Acsah H is a postgraduate student at the Department of Geopolitics and International Relations, Manipal Institute of Social Sciences, Humanities and Arts, MAHE, Manipal, Udupi. She is currently a research intern at NIAS.

The Blue Origin Rocket Explosion:
June 2026 | CWA # 2135

Madhura Meenakshi Tanikella | Madhura Meenakshi Tanikella is an undergraduate from the Department of Political Science, School of Liberal Arts, Alliance University, Bengaluru. She is currently an intern at NIAS.

Shangri-La Dialogue 2026:
June 2026 | CWA # 2134

Aishal Hab Yousuf | Aishal Hab Yousuf is a postgraduate student at the Department of International Studies. Stella Maris College, Chennai. She is currently an intern at NIAS, Bengaluru.

Shangri-La Dialogue 2026: Four Major Takeaways
June 2026 | CWA # 2132

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant with the Global Politics team at the Science, Technology and International Relations (STIR) Programme at the National Institute of Advanced Studies (NIAS), Bengaluru.

The US-Iran War, Week Fourteen:
June 2026 | CWA # 2131

Rohini Reenum | Rohini Reenum is a doctoral student at NIAS. She is working on Governance in Areas Beyond National Jurisdiction using the case study of the BBNJ Agreement.

Israel-Lebanon Tensions:
May 2026 | CWA # 2127

Madhura Meenakshi Tanikella | Madhura Meenakshi Tanikella is an undergraduate from the Department of Political Science, School of Liberal Arts, Alliance University, Bengaluru

The Quad Foreign Ministers' Meeting 2026:
May 2026 | CWA # 2124

Glynnis Winona B | Glynnis Winona B is an undergraduate student at the Department of International Relations, Peace Studies, and Public Policy, St. Joseph's University, Bengaluru. She is currently an intern at the National Institute of Advanced Studies (NIAS), Bengalur

The Crisis in Cuba:
May 2026 | CWA # 2121

Deb Dutta | Deb Dutta completed his graduation from the Department of Political Science, Sir Aurobindo International Centre of Education (SAICE), Puducherry. He is currently an intern at NIAS.

Israel, Lebanon, Hezbollah, and the Border Tensions:
May 2026 | CWA # 2120

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant with the Global Politics team at the Science, Technology and International Relations (STIR) Programme at the National Institute of Advanced Studies (NIAS), Bengaluru.

Conflicts in the Middle East
May 2026 | CWA # 2116

Yesasvi Koganti | Yesasvi Koganti is currently pursuing undergraduate studies at the Department of Political Science, Madras Christian College, Chennai. 

India, the UAE, and PM Modi’s visit:
May 2026 | CWA # 2114

Glynnis Winona B | Glynnis Winona B is an undergraduate student at the Department of International Relations, Peace Studies and Public Policy, St. Joseph's University, Bengaluru. She is currently an intern at the National Institute of Advanced Studies (NIAS), Bengaluru

What makes the UAE a global player?
May 2026 | CWA # 2112

Nithin V | Nithin V is a postgraduate student in international relations at Loyola College, Chennai. He is currently an intern at the National Institute of Advanced Studies (NIAS), Bengaluru.

Why does the Falkland Islands dispute keep recurring?
May 2026 | CWA # 2109

Aishal Hab Yousuf | Aishal Hab Yousuf is a postgraduate student at the Department of International Studies, Stella Maris College, Chennai. She is currently an intern at the National Institute of Advanced Studies (NIAS), Bengaluru.

North Korea's Constitutional Amendment 2026:
May 2026 | CWA # 2104

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant with the Global Politics team at the Science, Technology and International Relations (STIR) Programme at the National Institute of Advanced Studies (NIAS), Bengaluru.

The Israel-Lebanon Ceasefire:
May 2026 | CWA # 2091

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant with the Global Politics team at the Science, Technology and International Relations (STIR) Programme at the National Institute of Advanced Studies (NIAS), Bengaluru.

Conflicts in the Middle East:
May 2026 | CWA # 2090

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant with the Global Politics team at the Science, Technology and International Relations (STIR) Programme at the National Institute of Advanced Studies (NIAS), Bengaluru.

The US-Iran War, Week Ten:
May 2026 | CWA # 2088

Nithin V | Nithin V is a postgraduate student in International Relations, with an interest in geopolitics, international political economy, and climate governance. He is currently an intern at the National Institute of Advanced Studies (NIAS), Bengaluru.

King Charles's US Visit:
May 2026 | CWA # 2087

Siddhi Halyur | Siddhi Halyur is an undergraduate student at the Department of International Relations, Public Policy and Journalism at St Joseph's University, Bengaluru. She is currently an intern at the National Institute of Advanced Studies (NIAS), Bengaluru.

Japan, Vietnam and PM Takaichis Visit
May 2026 | CWA # 2086

Aishal Hab Yousuf | Aishal Hab Yousuf is a postgraduate student at the Department of International Studies, Stella Maris College, Chennai. She is currently an intern at the National Institute of Advanced Studies (NIAS), Bengaluru.

UAE's Exit from OPEC:
May 2026 | CWA # 2085

Glynnis Winona B | Glynnis Winona B is an undergraduate student at the Department of International Relations, Peace Studies and Public Policy, St. Joseph's University, Bengaluru. She is currently an intern at the National Institute of Advanced Studies (NIAS), Bengaluru

US troop withdrawal from Germany:
May 2026 | CWA # 2083

Brighty Ann Sarah | Brighty Ann Sarah is a Research Assistant with the Global Politics team at the Science, Technology and International Relations (STIR) Programme at the National Institute of Advanced Studies (NIAS), Bengaluru.

The US-Iran War, Week Nine:
May 2026 | CWA # 2081

Jenin Raj S | Dr Jenin Raj S is an Assistant Professor and Head of the Centre for Media, Department of Journalism, Mount Carmel College (Autonomous), Bengaluru.

Media freedom hits a 25-year low:
April 2026 | CWA # 2079

Aishal Hab Yousuf | Aishal Hab Yousuf, Postgraduate student, Department of International Studies, Stella Maris College, Chennai. She is currently an intern at the National Institute of Advanced Studies (NIAS), Bengaluru.

Japans New Defence Posture:
April 2026 | CWA # 2074

Brighty Ann Sarah | Ms Sarah is a Research Assistant at NIAS and Assistant Editor of NIAS Conflict Weekly.

Israel-Lebanon Ceasefire:
April 2026 | CWA # 2073

Akshath Kaimal | Mr Kaimal is a Research Assistant at NIAS. He works on Pakistan and Africa.

The US-Iran War, Week Eight:
April 2026 | CWA # 2065

Lakshmi Venugopal Menon | Dr Lakshmi Venugopal Menon is an academic and policy researcher specializing in Gulf studies, cultural heritage trafficking, geopolitics, migration, Afghan politics and the Taliban.

The Middle East (JanMar 2026):
March 2026 | CWA # 2042

Preetha Renganarayanan

March 2026 | CWA # 2001

Preetha Renganarayanan

February 2026 | CWA # 1986

Preetha Renganarayanan

February 2026 | CWA # 1959

Yesasvi Koganti | Yesasvi Koganti is an undergraduate student from Madras Christian College, Chennai.

UK and China
February 2026 | CWA # 1957

Preetha Renganarayanan | R Preetha is pursuing post-graduation in the Department of International Studies, Stella Maris College, Chennai, and is a Research Assistant at the National Institute of Advanced Studies, Bengaluru.

The India-US interim trade framework
February 2026 | CWA # 1956

Lekshmi MK | Lekshmi MK is pursuing post-graduation in the Department of Political Science, Madras Christian College, Chennai, and is a Research Assistant at the National Institute of Advanced Studies, Bengaluru.

End of the New Strategic Arms Reduction Treaty (START)
August 2025 | CWA # 1780

Abhiruchi Chowdhury

Trump tariffs:
June 2025 | CWA # 1694

Aashish Ganeshan

The US:
May 2025 | CWA # 1688

Ayan Datta

Gaza
May 2025 | CWA # 1675

Lekshmi MK

Turkey:
May 2025 | CWA # 1673

Padmashree Anandhan

Ukraine:
May 2025 | CWA # 1667

R Preetha and Brighty Ann Sarah

East Asia:
September 2019 | CWA # 162

Lakshman Chakravarthy N

5G: A Primer
December 2018 | CWA # 71

Mahesh Bhatta | Centre for South Asian Studies, Kathmandu

Nepal
December 2018 | CWA # 70

Nasima Khatoon | Research Associate, ISSSP, NIAS

The Maldives
December 2018 | CWA # 69

Harini Madhusudan | Research Associate, ISSSP, NIAS

India
December 2018 | CWA # 68

Sourina Bej | Research Associate, ISSSP, NIAS

Bangladesh
December 2018 | CWA # 67

Seetha Lakshmi Dinesh Iyer | Research Associate, ISSSP, NIAS

Afghanistan