Claim

REvil USES web shell

After exploiting a public-facing server vulnerability, REvil attackers deployed a web shell to establish an initial foothold.

Episode
EP 126 — REvil
Origin
Explicit
Confidence
98% (extractor score, not a fact score)
Speaker
Will
Attributed source
—

Transcript evidence

“they would deploy a web shell or some – launch some power shell codes on the server, establish that initial foothold”

Will · offsets 14237–14353

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:46:09.521370+00:00

claim:ep126:4d28ce4871c1