Chicago-based Ferrara acknowledged an Oct. 9 attack that encrypted some systems and disrupted production.
https://threatpost.com/ransomware-candy-corn-halloween/175630/
The country’s FSB said that it raided gang hideouts; seized currency, cars and personnel; and neutralized REvil’s infrastructure.
https://threatpost.com/russian-security-revil-ransomware/177660/