A Closer Look at the Dark Side Ransomware Gang
Summary: The FBI confirmed that the DarkSide ransomware group was responsible for an attack that caused Colonial Pipeline to shut down 5,550 miles of pipe, stranding fuel on the Gulf Coast. DarkSide, a ransomware-as-a-service platform that surfaced on Russian-language hacking forums in August 2020, ran a double-extortion operation and negotiated a $30 million demand against a $15 billion U.S. victim down to an $11 million payment in January 2021.
Why it matters: A $15 billion company negotiated a $30 million demand down to $11 million and still paid, and DarkSide advertised selling advance word on victims so investment scammers could short their stock before publication.
Read the original at Krebs on Security ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·