DarkSide (ELF)
- First seen
- 2020-08-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 12:59:45
Targeted industries: energy-and-utilities financial-services healthcare-and-pharmaceutical manufacturing technology-and-telecommunications
Targeted regions: country_code:us country_code:de country_code:gb
Context
DarkSide is a notorious ransomware that targets large organizations, encrypting their data and demanding a ransom for decryption. It has been known for its sophisticated operations, often exfiltrating data for additional extortion leverage.
Reports & references
- CrowdStrike — Carbon Spider Sprite Spider Target Esxi Servers With Ransomware (report)
- youtube.com — Watch (report)
- secureworks.com — Ransomware Groups Use Tor Based Backdoor For Persistent Access (report)
- Microsoft — Ransomware As A Service Understanding The Cybercrime Gig Economy And How To Protect Yourself (report)
- Mandiant — Shining A Light On Darkside Ransomware Operations (report)
- cloud.google.com — Darkside Affiliate Supply Chain Software Compromise (report)
- blogs.vmware.com — Esxi Targeting Ransomware The Threats That Are After Your Virtual Machines Part 1 (report)
- CrowdStrike — Big Game Hunting On The Rise Again According To Ecrime Index (report)
- CrowdStrike — How Big Game Hunting Ttps Shifted After Darkside Pipeline Attack (report)
- vmware.com — Vmw Exposing Malware In Linux Based Multi Cloud Environments (report)
- krebsonsecurity.com — Ransomware Gangs And The Name Game Distraction (report)
- Broadcom/Symantec — The Ransomware Threat September 2021 (report)
- therecord.media — Darkside Gang Estimated To Have Made Over 90 Million From Ransomware Attacks (report)
- therecord.media — Darkside Ransomware Gang Says It Lost Control Of Its Servers Money A Day After Biden Threat (report)
- bleepingcomputer.com — Darkside Ransomware Made 90 Million In Just Nine Months (report)
- bleepingcomputer.com — Popular Russian Hacking Forum Xss Bans All Ransomware Topics (report)
- CrowdStrike — Carbon Spider Sprite Spider Target Esxi Servers With Ransomware (report)
- CrowdStrike — How To Defend Against Conti Darkside Revil And Other Ransomware (report)
- databreaches.net — A Former Darkside Listing Shows Up On Revils Leak Site (report)
- digitalshadows.com — Ransomware As A Service Rogue Affiliates And Whats Next (report)
- pwc.co.uk — What Is Behind Ransomware Attacks Increase (report)
- blog.group-ib.com — Blackmatter (report)
- blog.group-ib.com — Blackmatter2 (report)
- blogs.blackberry.com — Threat Thursday Blackmatter Ransomware As A Service (report)
- therecord.media — Darkside Ransomware Gang Moves Some Of Its Bitcoin After Revil Got Hit By Law Enforcement (report)