Wanted: Pipeline Hackers - $10m Reward

The criminal hacking group known as DarkSide, which the FBI has previously said is based in Russia, is being actively hunted by the US Government. The US State Department is offering up to $10 million for information leading to the identification or location of senior members of a Russian-speaking ransomware gang known as DarkSide that hacked Colonial Pipeline.

An extra  $5 million reward is being offered for any information about people conspiring to participate with DarkSide in ransomware attacks. This is the latest step bt the US to put pressure on cyber criminals that have extorted millions of dollars from US companies and threatened critical infrastructure. 

In May, a DarkSide ransomware attack shut down a vital 5,500-mile-long fuel pipeline on the east coast of the US. The pipeline carries 45% of the fuel used on the east coast.The Colonial Pipeline operating company was forces to shut down its operations after the attack, causing widespread fuel shortages

President Biden subsequently appealed to Russian President Vladimir Putin to take action against ransomware groups operating from Russia. 

The US Department said in a statement, “In offering this reward, the United States demonstrates its commitment to protecting ransomware victims around the world from exploitation by cyber criminals. The United States looks to nations who harbour ransomware criminals that are willing to bring justice for those victim businesses and organisations affected by ransomware.”

DarkSide is though to have extorted over $90 million in ransom payments from 47 victims, according to crypto-currency analysis company Elliptic, although the FBI was successful in recovering  the majority of the ransom paid by Colonial Pipeline, by seizing 63.7 Bitcoins before they could be extracted from US jursidiction.

The US government reward for information about DarkSide comes off the back of a recent law enforcement operation against the REvil ransomware gang, where the Tor servers associated with REvil were seized in what was called a ‘multi-country’ hack-back operation.

That operation was carried out by Ukraine's law enforcement and further arrests have been made in Ukraine in connection the Cl0p extortionist gang.

As the Biden administration pressures Russia to repress cyber criminal activity, US law enforcement and  international partners are pursuing suspects outside of Russia.A 38-year-old Russian man accused of being part of a cyber crime ring that infected US computers with ransomware was extradited from the South Korea to the US last month and now faces computer fraud charges in a US Federal court.

US State Dept:  AA.com:      CNN:    ErieNewsNow:     Silicon:       BBC:    Oodaloop:    FinTech Global:

You Might Also Read: 

Will Governments Ban Ransom Payments To Hackers?:

 

« Focus On Fighting Cyber Crime In Financial Services
NSO Spyware Is On US Trade Blacklist »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

MetaFlows

MetaFlows

MetaFlows’ SaaS malware detection & prevention software passively analyzes the behavior and the content of Internet traffic.

Cyber Threat Intelligence Network (CTIN)

Cyber Threat Intelligence Network (CTIN)

CTIN provides cyber threat intelligence services including training, platform evaluation, ISAC/ISAO systems development and counter botnet operations.

Advantech

Advantech

Advantech is a leader in providing trusted innovative embedded and automation products and solutions. Activities include IoT security.

OmniNet

OmniNet

OmniNet delivers the next generation of cybersecurity and is the only provider in the market to move the edge of small businesses to a virtual, omnipresent perimeter.

Zivaro

Zivaro

Zivaro provides transformational consulting and technology services to help clients attain real business value from their technology investments.

CERT-PH

CERT-PH

CERT-PH is the National Computer Emergency Response Team and the highest body for cybersecurity related activities in the Philippines.

SPARTA Consortium

SPARTA Consortium

SPARTA tackles hard innovation challenges, leading the way in building transformative capabilities and forming a world-leading cybersecurity competence network across the EU.

CyCraft Technology Corp

CyCraft Technology Corp

CyCraft is an AI company that forges the future of cybersecurity resilience through autonomous systems and human-AI collaboration.

Venrock

Venrock

Venrock helps entrepreneurs build some of the world's most disruptive, successful companies. We invest in technology: Security, Cloud Services, Big Data, Healthcare IT, AdTech.

Take Five

Take Five

Take Five is a national campaign offering straight-forward, impartial advice that helps prevent email, phone-based and online fraud – particularly where criminals impersonate trusted organisations.

Qualcomm Technologies

Qualcomm Technologies

Qualcomm invents breakthrough technologies that transform how the world connects, computes and communicates.

Real Protect

Real Protect

Real Protect is a Brazilian provider of managed security (MSS) and cyber defense services.

Privacy Compliance Hub

Privacy Compliance Hub

Privacy Compliance Hub provide an easy to use platform with a comprehensive data protection compliance programme including training, information, templates and reporting.

TetherView

TetherView

TetherView provides leading virtual desktop and email security technology to help businesses stand up and manage digital workspaces.

Google Safety Engineering Center (GSEC)

Google Safety Engineering Center (GSEC)

GSEC Málaga is an international cybersecurity hub where Google experts work to understand the cyber threat landscape and to create tools that keep users around the world safer online.

Increase Your Skills (IYS)

Increase Your Skills (IYS)

Armed and ready: raise awareness of cyberattacks in your company with the Full-Service Awareness Platform from IYS – fast and effective. We help you develop a robust, sustainable security strategy.