Since initially surfacing in August 2020, the creators of DARKSIDE ransomware and their affiliates have launched a global crime spree affecting organizations in more than 15 countries and multiple industry verticals. We have not independently validated these claims and there is some speculation by other actors that this could be an exit scam. The post cited law enforcement pressure and pressure from the United States for this decision. Decrypters would also be provided for companies who have not paid, possibly to their affiliates to distribute.
This announcement stated that they lost access to their infrastructure, including their blog, payment, and CDN servers, and would be closing their service.
Update (May 14): Mandiant has observed multiple actors cite a May 13 announcement that appeared to be shared with DARKSIDE RaaS affiliates by the operators of the service.
0 kommentar(er)
