DarkSide ransomware started withdrawing funds from crypto wallets after hitting REvil

[Tomcat]

The group appears to be trying to secure its funds for fear of losing them again.

The ransomware operators DarkSide and BlackMatter have withdrawn most of the bitcoins from their cryptocurrency wallets after the news of the special operations' special operation to neutralize the extortionist group REvil.

According to information security expert Omri Segev Moyal, approximately 107 bitcoins (about $ 6.8 million) were transferred from wallets presumably controlled by DarkSide / BlackMatter. The funds were transferred to 7 wallets (7-8 bitcoins each), the rest (38 bitcoins) is stored in a wallet with the address bc1q9jy4pq5su9slh56gryydwkk0qjnqxvfwzm7xl6. It is assumed that hackers will try to launder or cash out funds.

The DarkSide group has attracted the attention of intelligence agencies and the public after a sensational attack on the American operator of the pipeline for the delivery of oil products Colonial Pipeline, which led to disruptions in the delivery of fuel on the East Coast of the United States ... A week after the attack, as a result of the operation of the special services, the group lost its servers and part of the cryptocurrency and announced the cessation of activity.

However, after several months of inactivity, DarkSide is back with a new infrastructure and a new name - BlackMatter. In light of recent events, the group appears to be trying to secure its funds for fear of losing them again.

Moyal has already asked the administrations of cryptocurrency exchanges to block the Darkside / BlackMatter wallets.

 

[Brother]

US Department of State to pay $ 10 million for information on DarkSide hackers​

In addition, the State Department is offering up to $ 5 million for information on DarkSide accomplices.

The US authorities are ready to pay $ 10 million to those who share important information about the leaders of the DarkSide cybercriminal group, which attacked the Colonial Pipeline pipeline company this spring.

"The US Department of State is announcing a reward of up to $ 10 million for information that allows you to locate any person or persons holding a key position in the transnational organized crime group DarkSide," the State Department said in a statement.

In addition to this award, the State Department is offering a reward of up to $ 5 million for information that will help arrest in any country those who temporarily sided with hackers or helped in any DarkSide criminal act.

Recall that the Colonial Pipeline, which provides 45% of the total fuel supply to the eastern United States, was attacked by a ransomware virus. The company had to temporarily suspend operations. Following a cyberattack on the largest pipeline company in the United States, the United States authorities declared a regional emergency.