Thread by @mikojava

1 Darkside is absolutely amazing and worth studying krebsonsecurity.com/2021/05/a-clos…

2 DarkSide is responsible for an attack that caused Colonial Pipeline to shut down 5,550 miles of pipe, stranding countless barrels of gasoline, diesel and jet fuel on the Gulf Coast. DarkSide cybercrime gang earns $15 billion in annual revenue.

3 First surfacing on Russian language hacking forums in August 2020, DarkSide is a ransomware-as-a-service platform that vetted cybercriminals can use to infect companies with ransomware and carry out negotiations and payments with victims.

4 OK let's just stop there to read that line again. "Ransomware-as-a-service platform" how does DarkSide perform on the Gartner "Magic Quadrant" for RaaS vendors?

5 DarkSide also has advertised a willingness to sell information about upcoming victims before their stolen information is published on the DarkSide victim shaming blog, so that enterprising investment scammers can short the company’s stock in advance of the news.

6 This materially ups the game on cybersecurity. Also this creates a form of "Black Hat Bounty" where an insider can potentially get paid millions of dollars to betray their own Enterprise via network penetration. This can be at a very low level of employee who simply has VPN

7 you can buy lots of hacked data on the darkweb including names, passwords, home addresses phone numbers etc. One of the problems there is that the companies arent the only victims, the customers also become victims of doxxing and downstream issues.

8 While by no means a panacea, @KeylessTech secures by biometrics and further decentralizes your authentication database thus leaving no user data to steal.

@UnrollThread

9 one of the deeply alarming things about this is that darkside is like a pin used to pop traditional enterprise organizations. This will accelerate the shift to DAO which are built with a novel combination of open and secure

10 Migration to purpose built Internet organizations requires an intrinsically open yet secure architecture unlike the traditional Enterprise which is built more like a medieval castle

11 there's nothing alarming about DAOs but there will be chaos ahead as these criminal cybersecurity organizations attack the infrastructure of our society

12 A final word, I've heard from reputable sources that #DarksideRansomeWare checks to see if the Russian Language #Keyboardmap is installed, and if you have, it won’t attack the computer.