Wanted: Pipeline Hackers - $10m Reward

The criminal hacking group known as DarkSide, which the FBI has previously said is based in Russia, is being actively hunted by the US Government. The US State Department is offering up to $10 million for information leading to the identification or location of senior members of a Russian-speaking ransomware gang known as DarkSide that hacked Colonial Pipeline.

An extra  $5 million reward is being offered for any information about people conspiring to participate with DarkSide in ransomware attacks. This is the latest step bt the US to put pressure on cyber criminals that have extorted millions of dollars from US companies and threatened critical infrastructure. 

In May, a DarkSide ransomware attack shut down a vital 5,500-mile-long fuel pipeline on the east coast of the US. The pipeline carries 45% of the fuel used on the east coast.The Colonial Pipeline operating company was forces to shut down its operations after the attack, causing widespread fuel shortages

President Biden subsequently appealed to Russian President Vladimir Putin to take action against ransomware groups operating from Russia. 

The US Department said in a statement, “In offering this reward, the United States demonstrates its commitment to protecting ransomware victims around the world from exploitation by cyber criminals. The United States looks to nations who harbour ransomware criminals that are willing to bring justice for those victim businesses and organisations affected by ransomware.”

DarkSide is though to have extorted over $90 million in ransom payments from 47 victims, according to crypto-currency analysis company Elliptic, although the FBI was successful in recovering  the majority of the ransom paid by Colonial Pipeline, by seizing 63.7 Bitcoins before they could be extracted from US jursidiction.

The US government reward for information about DarkSide comes off the back of a recent law enforcement operation against the REvil ransomware gang, where the Tor servers associated with REvil were seized in what was called a ‘multi-country’ hack-back operation.

That operation was carried out by Ukraine's law enforcement and further arrests have been made in Ukraine in connection the Cl0p extortionist gang.

As the Biden administration pressures Russia to repress cyber criminal activity, US law enforcement and  international partners are pursuing suspects outside of Russia.A 38-year-old Russian man accused of being part of a cyber crime ring that infected US computers with ransomware was extradited from the South Korea to the US last month and now faces computer fraud charges in a US Federal court.

US State Dept:  AA.com:      CNN:    ErieNewsNow:     Silicon:       BBC:    Oodaloop:    FinTech Global:

You Might Also Read: 

Will Governments Ban Ransom Payments To Hackers?:

 

« Focus On Fighting Cyber Crime In Financial Services
NSO Spyware Is On US Trade Blacklist »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

FinalCode

FinalCode

FinalCode offers a file encryption and file-based enterprise digital rights management (eDRM) platform.

Norwegian Business & Industry Security Council (NSR)

Norwegian Business & Industry Security Council (NSR)

NSR is a member organization serving the Norwegian business sector in an advisory capacity on matters relating to crime and security including cyber.

e2e-assure

e2e-assure

e2e Protective Monitoring and Security Operations Centre (SOC) Service is a complete cyber defence service to protect your critical assets from cyber attacks and GDPR breaches.

Secarma

Secarma

Secarma provides penetration testing, security assessments, consultancy, and training services to ensure your digital infrastructure is secure from cybersecurity threats.

Greensafe IT

Greensafe IT

Greensafe offer various onsite and offsite data erasure services, aimed at increasing data security whilst reducing any risk of data loss during transit.

Vigilant Software

Vigilant Software

Vigilant Software develops industry-leading tools for intelligent, simplified compliance, including ISO27001-risk management and EU GDPR.

IT Jobs Watch

IT Jobs Watch

IT Jobs Watch provides a concise and accurate map of the prevailing IT job market conditions in the UK.

DataViper

DataViper

DataViper is a threat intelligence platform designed for organizations, investigators, and law enforcement.

DKBInnovative

DKBInnovative

DKBinnovative is a best-practice driven IT management firm that provides secure, reliable IT solutions to productivity-focused clients around the globe.

Falcongaze

Falcongaze

Falcongaze SecureTower is a comprehensive DLP solution for the protection of business against internal threats.

DataExpert Singapore

DataExpert Singapore

DataExpert Singapore provide solutions and services in the areas of Digital Forensics, Data Recovery, Data Duplication, Data Degaussing & Wiping, Data Destruction, and IT Disposal.

White Tuque

White Tuque

A new way to protect your organization. White Tuque is your partner in identifying threats, understanding your risk, and ensuring your business remains resilient.

CoreStack

CoreStack

CoreStack helps enterprises overcome cloud challenges such as ever growing security risks, stringent regulatory compliance needs and operational complexities.

Tracebit

Tracebit

Tracebit uses decoys to detect and respond to cloud intrusions in minutes.

Trovent Security

Trovent Security

Trovent was founded with a clear goal: to support medium-sized companies in significantly increasing their IT security level.

DigitalXForce

DigitalXForce

DigitalXForce is the Digital Trust Platform for the New Era – SaaS based solution that provides Automated, Continuous, Real Time Security & Privacy Risk Management.