Colonial Pipeline hackers DarkSide have reportedly lost control of money

More On:

cybersecurity

Lindsey Graham rips Biden’s ‘naive,’ ‘weak’ response to Colonial Pipeline cyberattack

Colonial Pipeline has restarted operations after cyberattack

Running on empty: Over 1,000 gas stations are out of fuel across the Southeast

Biden official begs drivers not to ‘hoard’ gas as pipeline hack causes shortages

Cybercrime group DarkSide said it has lost control of its web servers and some of the money it’s made off of ransom payments after the FBI confirmed that the gang was behind the $5 million ransomware attack on Colonial Pipeline last week that spurred gas shortages and panic buying across the Southeast.

“A few hours ago, we lost access to the public part of our infrastructure, namely: Blog. Payment server. DOS servers,” read a post online by user Darksupp, the operator of DarkSide, according to The Record. 

The announcement was posted Thursday evening on cybercrime underground community Exploit Forum, according to Recorded Future threat intelligence analyst Dmitry Smilyanets. 

It remains unclear if the announcement is a ruse for the group to escape attention or avoid paying out its partners. Cybersecurity analysts warned that anything posted by DarkSide operators should be taken with a grain of salt.

Darksupp also claimed that cryptocurrency funds were withdrawn from the hacker group’s payment server, which hosted ransom payments made by victims such as Colonial Pipeline, the report said. The funds, which the group is typically supposed to split between itself and its partners, were transferred to an unknown wallet, Darksupp said, according to The Record.

The cybergang’s claims come after President Biden said the US would go after the group.

“We have been in direct communication with Moscow about the imperative for responsible countries to take decisive action against these ransomware networks,” President Biden said Thursday at a press conference. 

“We are also going to pursue a measure to disrupt their ability to operate,” he added.

The White House did not immediately return the Post’s request for comment. 

Share this article:

Source: Read Full Article