
DarkSide hackers of Colonial Pipeline say they're shutting down
DarkSide said it was shutting down, though some suspect it could be scheme.
DarkSide said it was shutting down, though some suspect it could be scheme.
The DarkSide hacking group blamed for the Colonial Pipeline ransomware attack is shutting down its operations, a report says.
The DarkSide ransomware affiliate program responsible for the six-day outage at Colonial Pipeline this week that led to fuel shortages and price spikes across the country is running for the hills. The crime gang announced it was closing up shop after its servers were seized and someone drained the cryptocurrency from an account the group uses to pay affiliates.
DarkSide also claims its ceasing operations. At the same time, heightened US scrutiny appears to have prompted the cybercriminal underworld to shun the ransomware group.
The DarkSide ransomware operation has allegedly shut down after the threat actors lost access to servers and their cryptocurrency was transferred to an unknown wallet.
CNBC's Eamon Javers reports on the retaliation that hacker group Darkside appears to be facing after hacking the Colonial Pipeline.
DarkSide—the ransomware group that disrupted gasoline distribution across a wide swath of the US this week—has gone dark, leaving it unclear if the group is ceasing, suspending, or altering its operations or is simply orchestrating an exit scam.
In the wake of the disruption to Colonial Pipeline, a popular Russian-language criminal forum has claimed it will ban the sale of ransomware tools, according to multiple researchers who monitor the site.
DarkSide, the hacker group whose malware was responsible for shutting down the Colonial Pipeline and disrupting gasoline supplies throughout the southeastern U.S., says it will stop distributing the hacking tools its collaborators use to attack infrastructure.
Days before the Darkside ransomware creators formally launched their business with a press release last August, a U.S. victim was already preparing to pay them a $2 million ransom.
When a new ransomware group popped up on the scene last year, the hackers did what’s in vogue for digital extortion organizations these days: They issued a press release. The hackers had already made “millions of dollars” in profit working as affiliates for other groups when they decided to go out on their own, the announcement said. “We created DarkSide because we didn’t find the perfect product. Now we have it.”
Colonial Pipeline might be tight-lipped about the vulnerability hackers exploited to launch a ransomware attack that shut down the U.S.’s largest pipeline, but details are emerging about the DarkSide ransomware variant behind the attack and the cybercriminals associated with it.
Stay informed with our weekly executive update, sending you the latest news and timely data on the threats, risks, and regulations affecting your organization.