Threat Landscape Dashboard

Home

DarkSide - Ransomware

The ransomware uses Salsa20 and RSA encryption and appends a random extension to encrypted files. The ransom note reports the threat actor stole more than 100GB of data and threatens to publish the information if the ransom is not paid. Victims are presented with Bitcoin and Moreno addresses to pay the cyber-criminal the $2,000.00 for the decryption key.

Name	Modified Date	Sources
DarkSide - Ransomware	2020-08-12	https://www.mcafee.com/enterprise/en-us/downloads/free-tools/ransomware-decryption.html https://www.nomoreransom.org/en/index.html https://www.mcafee.com/enterprise/en-us/security-awareness/ransomware.html https://github.com/advanced-threat-research/Yara-Rules/blob/master/ransomware/RANSOM_darkside.yar

Threat Landscape Dashboard

DarkSide - Ransomware

Choose your region