Content by Doug Olenick

Tracking DarkSide Ransomware Gang's Profits

Doug Olenick  •  May 18, 2021

The DarkSide ransomware gang apparently collected over $90 million in ransom payments from about 47 victims, including Colonial Pipeline Co., since the gang began operating in August 2020, according to the blockchain analytics firm Elliptic, which says it analyzed bitcoin wallet activity.

DarkSide Ransomware Gang Says It Has Shut Down

Doug Olenick  •  May 14, 2021

The gang behind DarkSide ransomware, which U.S. authorities say was used in the attack against Colonial Pipeline Co., says it's closed its ransomware-as-a-service operation after losing access to part of its infrastructure.

Paying a Ransom: Does It Really Encourage More Attacks?

Doug Olenick  •  May 14, 2021

Some cybersecurity experts question the contentions of Speaker of the House Nancy Pelosi and another member of Congress, who say a $5 million ransom reportedly paid by Colonial Pipeline Co. after being hit by DarkSide ransomware would serve as a catalyst for attacks on other critical infrastructure providers.

Babuk Ransomware Gang Posts More DC Metro Police Data

Doug Olenick  •  May 12, 2021

The Babuk ransomware gang has reignited its feud with the Washington, D.C. Metropolitan Police Department by posting what it says is an additional 22GB of stolen data and what it claims is a transcript of the failed ransom negotiations.

FBI: DarkSide Ransomware Used in Colonial Pipeline Attack

Scott Ferguson , Doug Olenick  •  May 10, 2021

The FBI and White House confirmed Monday that the DarkSide ransomware variant was used in the Friday attack that caused disruptions at Colonial Pipeline Co., which operates a pipeline that supplies fuel throughout the eastern U.S. But the gang behind the ransomware tried to shift the blame to an affiliate.

Tulsa City Officials Report Ransomware Attack

Doug Olenick  •  May 10, 2021

Tulsa city officials shut down systems and websites after a Sunday ransomware attack, making it impossible for residents to gain online access to many services.

CISA Alert Describes FiveHands Ransomware Threat

Doug Olenick  •  May 7, 2021

The Cybersecurity and Infrastructure Security Agency has issued an alert providing more details on the threat posed by FiveHands ransomware attacks and offering risk mitigation tips.

DHS Secretary: Small Businesses Hard-Hit by Ransomware

Doug Olenick  •  May 6, 2021

About 50% to 70% of all ransomware attacks in the U.S. are targeting small and medium-sized businesses, costing the victims an estimated total of $350 million in the last year, Secretary of Homeland Security Alejandro Mayorkas said Wednesday in a speech to the U.S. Chamber of Commerce.

Babuk to Close Ransomware Operation After DC Police Attack

Doug Olenick  •  April 30, 2021

The Babuk ransomware gang says it will no longer launch attacks but instead will make its malware source code available for other attackers to use. The gang took credit for recent attacks against the Washington, D.C. Metropolitan Police Department and the Houston Rockets basketball team.

Ransomware Gang Exploits SonicWall Zero-Day Flaw

Doug Olenick  •  April 30, 2021

A cyberthreat gang that's been active since 2020 exploited a now-patched zero-day vulnerability in the SonicWall SMA 100 Series appliance to plant ransomware in attacks launched earlier this year, FireEye Mandiant researchers say.

Ransomware Attacks on Schools: The Latest Developments

Doug Olenick  •  April 22, 2021

In the latest development in a series of ransomware attacks against schools this year, the Conti gang followed through on an earlier threat and posted on its darknet website about 26,000 files that it says it stole from Florida's Broward County Public Schools district in March.

PR Campaign: Babuk Ransomware Gang Claims Decryptor Repaired

Doug Olenick  •  April 19, 2021

The Babuk ransomware gang launched a public relations campaign Saturday, posting a message on its website saying it had repaired a defect in the decryptor it provides to victims who pay the ransom demand.

Houston Rockets Investigate Ransomware Attack

Doug Olenick  •  April 16, 2021

The NBA's Houston Rockets reported on Wednesday that the organization was recently hit with a ransomware attack for which the Babuk cyber gang has taken responsibility. Babuk ransomware is known to be buggy and cannot always be decrypted - even with the proper key.

Attackers Using Malicious Doc Builder Called 'EtterSilent'

Doug Olenick  •  April 8, 2021

Researchers at the security firm Intel 471 report cybercriminal gangs are using a newly uncovered malicious document builder called "EtterSilent" to create differentiated, hard-to-discover, malicious documents that can be deployed in phishing attacks.

Ziggy Ransomware Gang Offers Victims Ransom Refunds

Doug Olenick  •  April 7, 2021

The now-defunct Ziggy ransomware gang is reportedly offering to return the ransoms it collected, but some security experts question whether the offer is legitimate or a publicity stunt.