The criminal group behind the REvil (Sodinokibi) ransomware is extorting a New York-based law firm, threatening to release sensitive files on the company's celebrity clients unless the the firm pays a whopping $42 million ransom demand. The extortion attempt is the result of a ransomware infection that Grubman Shire Meiselas & Sacks (GSMS) suffered last week. On May 7, REvil operators published a message addressed to the GSMS staff on a dark web portal, threatening to release files about its clients, files the REvil gang stole from the law firm's internal network before encrypting its files.