Threat Actor

Criminal gang known as DarkSide that cultivates a Robin Hood image of stealing from corporations and giving a cut to charity.
It is among ransomware gangs that have "professionalized" a criminal industry that has cost Western nations tens of billions of dollars in losses in the past three years.
DarkSide claims it does not attack hospitals and nursing homes, educational or government targets and that it donates a portion of its take to charity. It has been active since August and, typical of the most potent ransomware gangs, is known to avoid targeting organizations in former Soviet bloc nations.

DarkSide announced its closure in the aftermath of the Colonial Pipeline assault.

Malware Used by this Threat Actor

No malware identified for this threat actor.