DarkSide moves its bitcoins after the fall of REvil

The DarkSide Group had set up a Ransomware-as-a-Service business model where affiliates carry out infections and negotiate the payment of a ransom. With a value of around $ 7 million, it moved bitcoin funds that had been inactive for a long time last week.

This move was spotted by cryptocurrency analysis firm Elliptic. Within hours, the funds were transferred to several new digital wallets with small amounts at each step.

This is a common money laundering technique, used to attempt to make funds more difficult to track and to facilitate their conversion into fiat currency when exchanging. “, written Elliptic.

Fear of further reprisals after REvil

The merry-go-round began in the wake of information from Reuters about a hacking operation by the ransomware group REvil carried out by the police, and in particular with the contribution of the American cyber army.

The ransomware code used by DarkSide has often been compared to that used by REvil. DarkSide has been linked to the cyber ransomware attack that struck and crippled for days one of the largest oil pipelines in the United States operated by Colonial Pipeline.

According to Elliptic, DarkSide received the equivalent of just over $ 90 million with bitcoin ransom payments from around 50 victims before shutting down operations after the (too) big attack on Colonial Pipeline.

In May, the group suggested that part of its infrastructure had been seized by the authorities. It had, however, reappeared with a new infrastructure and the name BlackMatter.


Source: GNT – actualit├ęs by www.generation-nt.com.

*The article has been translated based on the content of GNT – actualit├ęs by www.generation-nt.com. If there is any problem regarding the content, copyright, please leave a report below the article. We will try to process as quickly as possible to protect the rights of the author. Thank you very much!

*We just want readers to access information more quickly and easily with other multilingual content, instead of information only available in a certain language.

*We always respect the copyright of the content of the author and always include the original link of the source article.If the author disagrees, just leave the report below the article, the article will be edited or deleted at the request of the author. Thanks very much! Best regards!