The decision of the DarkSide ransomware gang to shut down operations is causing chaos among its network of affiliates, who have complained about not receiving the payments for their successful breaches.
The affiliated are asking the administrators of a Russian-language hacker forum to unlock the funds in bitcoins they are maintaining as part of the escrow process.
The ransomware gang transferred in the wallet of the popular hacker forum XSS 22 bitcoin as proof of their reputation., and the funds are administrated as part of the escrow mechanism offered by the platform.
Many experts speculate the gang opted for an exit scam keeping for them the ransom paid by the victims of its network of affiliates. On the other side, DarkSide operators claim to have shut down operations due to pressure from the US authorities after the attack on Colonial Pipeline.
Researchers from Bleeping computers reported a series of claims submitted by members of the hacking forum that supported the operations of the DarkSide ransomware gang with different roles. Some affiliates worked as pentester for some attacks or on corporate breaches.
DarkSide operations begun in the threat landscape in August 2020, the group carried multiple attacks against organizations worldwide.
Experts from blockchain analysis firm Elliptic estimated that the Darkside ransomware gang has earned over $90 million from ransom payments from its victims since October 2020.
“In total, just over $90 million in Bitcoin ransom payments were made to DarkSide, originating from 47 distinct wallets.” reads the report published by the Elliptic. “According to DarkTracer, 99 organisations have been infected with the DarkSide malware – suggesting that approximately 47% of victims paid a ransom, and that the average payment was $1.9 million.”
(SecurityAffairs – hacking, DarkSide ransomware)
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.