GINC-APT-1112 · Criminal

Darkside

Also BlackMatter.

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
2 sources carry it
Identifier
GINC-APT-1112 · darkside

What it is

Darkside, the latest ransomware operation to emerge has been attacking organizations beginning earlier this month. Darkside’s customized attacks on companies have already garnered them million-dollar payouts. Through their “press release”, these threat actors have claimed to be affiliated with prior ransomware operations making millions of dollars. They stated that they created this new product to match their needs, as prior products didn’t. Darkside explains that they only target companies they know that can pay the specified ransom. They have allegedly promised that they will not attack the following sectors. They include medicine, education, non-profit organizations, and the government sector.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
BlackMatter