THREAT ACTOR: DarkSide
Criminal gang known as DarkSide that cultivates a Robin Hood image of stealing from corporations and giving a cut to charity.
It is among ransomware gangs that have "professionalized" a criminal industry that has cost Western nations tens of billions of dollars in losses in the past three years.
DarkSide claims it does not attack hospitals and nursing homes, educational or government targets and that it donates a portion of its take to charity. It has been active since August and, typical of the most potent ransomware gangs, is known to avoid targeting organizations in former Soviet bloc nations.
DarkSide announced its closure in the aftermath of the Colonial Pipeline assault.
Incidents Associated with this Threat
- May 13, 2021: Toshiba Hit In DarkSide Ransomware Attack
- May 7, 2021: Colonial Pipeline Ops Shut Down after Ransomware Attack
- April 28, 2021: Chemical Distribution Company Brenntag paid $4.4M Ransom to Darkside Gang
Malware Used by this Threat Actor
No malware identified for this threat actor.