DarkSide, ransom group linked to Colonial Pipeline hack, new but not amateur

DarkSide, ransom group linked to Colonial Pipeline hack, new but not amateur

Ransom software works by encrypting victims’ data; typically hackers will offer the victim a key in return for cryptocurrency payments that can run into the hundreds of thousands or even millions of dollars. If the victim resists, hackers are increasingly threatening to leak confidential data in a bid to pile on the pressure.


Loading


DarkSide’s site on the dark web hints at their hackers’ past crimes, claims they previously made millions from extortion and that just because their software was new “that does not mean that we have no experience and we came from nowhere.”


The site also features a Hall of Shame-style gallery of leaked data from victims who haven’t paid up, advertising stolen documents from more than 80 companies across the United States and Europe.


Reuters was not immediately able to verify the group’s various claims but one of the more recent victims featured on its list was Georgia-based rugmaker Dixie Group which publicly disclosed a digital shakedown attempt affecting “portions of its information technology systems” last month.



A Dixie executive did not immediately return a message seeking further comment.


Loading


In some ways DarkSide is hard to distinguish from the increasingly crowded field of internet extortionists. Like many others it seems to spare Russian, Kazakh and Ukrainian-speaking companies, suggesting a link to the former Soviet republics.


It also has a public relations program, as others do, inviting journalists to check out its haul of leaked data and claiming to make anonymous donations to charity. Even its tech savvy is nothing special, according to Georgia Tech computer science student Chuong Dong, who published an analysis of its programming.


< ..

Support the originator by clicking the read the rest link below.