4 ms·
One thing that impressed me about this situation was the speed at which this was dealt with. A few hours after the attack, an executive order was signed reduci
by mywittyname 5y ago
One thing that impressed me about this situation was the speed at which this was dealt with. A few hours after the attack, an executive order was signed reducing regulations around truck transport of fuel. But the next day, service was being restored. And by the end of the week, the attackers were disbanded and their assets seized.
There's a pretty clear message here that the US isn't fucking around.
- wang_li 5y agoIf I'd just collected enough ransom to retire and never work again, I'd also put out a press release announcing I was out of business and someone seized all my shit and etc.
- hooande 5y agoDarkside was a legit business. They routinely collected ransoms ten or twenty times larger than what they got from Colonial. if they were going to retire, they would have done it a long time ago
- snypher 5y agoDidn't Colonial pay $5m? I don't think Darkside ever received a $50m-$100m ransom. Do you have any more details?
- hooande 5y agoThey don't have financial reports and insurance companies don't routinely disclose ransom amounts. Darkside has opened negotiations in the tens of millions in the past [0], with an average demand in the millions [1] [0] https://krebsonsecurity.com/2021/05/a-closer-look-at-the-darkside-ransomware-gang/ https://krebsonsecurity.com/2021/05/a-closer-look-at-the-dar... [1] https://www.areteir.com/darkside-ransomware-caviar-taste-on-your-big-game-budget/ https://www.areteir.com/darkside-ransomware-caviar-taste-on-...
- fuzzylightbulb 5y agoI can't find evidence of this "routinely collected ransoms ten or twenty times larger than what they got from Colonial" claim. Colonial is rumored to have paid out ~$4mm. Every source about Darkside seems to cite a "between $200,000 and $2 million for the file decryption key" range. This would put the Colonial ransom far above their typical payout.