Ransomware
Abuser: REvil (possible imposter)
According to Twitter user at https://twitter.com/REvil92457183/, they've posted a ransom demand at https://pastebin.com/y207gbnR, seeking 1btc to stop DDoS attacks against VOIP provider VOIP.ms.
United States, 2021-09-18 19:00:53