darkside

· InactiveDarkside ransomware group has started its operation in August of 2020 with the model of RaaS (Ransomware-as-a-Service). They have become known for their operations of large ransoms scale. They have announced that they prefer not to attack hospitals, schools, non-profits, and governments, but rather big organizations that can be able to pay large ransoms. Darkside ransomware group became very famous following the cyberattack of the Colonial Pipeline and Toshiba unit. The FBI finally terminate the Darkside operation and Managed to pull money from their wallets back.

Victims

Status

Inactive

Sites

Countries Hit

Profile

[CISA Alert aa21-131a](https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-131a)

https://www.crowdstrike.com/blog/carbon-spider-embraces-big-game-hunting-part-1

https://news.sophos.com/en-us/2021/05/11/a-defenders-view-inside-a-darkside-ransomware-attack/

Top Countries

US4

CA2

BR1

GB1

IT1

JP1

Top Sectors

Commercial Facilities3

Transportation Systems2

Energy1

Food and Agriculture1

Information Technology1

Financial1

Critical Manufacturing1

Recent Victims

View all 10 →

One Call (insurance)

GB · Financial

May 13, 2021

Colonial Pipeline

US · Transportation Systems

May 7, 2021

Toshiba Tec Group

JP · Critical Manufacturing

May 1, 2021

Compucom (MSP)

US · Information Technology

Feb 27, 2021

Discount Car and Truck Rentals

CA · Transportation Systems

Feb 1, 2021

Segafredo Zanetti

IT · Food and Agriculture

Feb 1, 2021

Companhia Paranaense de Energia (Copel)

BR · Energy