[aaron695]

You think that they don't attack Russian/Ex countries and "Syria" means that claim they are Ex/Russian related is arbitrary?

They famously released Syrian data for free, a month or so later added the Syrian language to the ransomware -

https://krebsonsecurity.com/2019/07/is-revil-the-new-gandcra...

[boomboomsubban]

I'm saying they provide no evidence for the claim. They spend a long time going over what is in the config, which they link to, then just say "and they don't target these languages."

Your links supposed anonymous forum post is better evidence, though it's only evidence on the Syria claim is an unlinked announcement and the actions of a group they guess is related.