Colonial Pipeline

RansomedVC Ransomware Group is Shutting Down and Selling Assets
RansomedVC, the ransomware-as-a-service (RaaS) group that cut a high-profile but short-lived swath through the cybercrime scene over the past three months, is shutting down operations and selling off its infrastructure. The threat ...

Two Years After Colonial Pipeline, What Have We Learned?
The second anniversary of the Colonial Pipeline ransomware attack has come and gone, and while many lessons have been learned and assimilated, there’s still more we can do. Security Boulevard reached out ...

BlackByte is Back and Acting a Lot Like LockBit
Like many ransomware strains, BlackByte has reemerged after a brief hiatus—and in its second iteration has already taken to hacker forums to push a new Tor data leak site that taps some ...

4 Ways to Avoid the Next Colonial Pipeline Cyberattack
May 2022 marked the first anniversary of the largest publicly disclosed cyberattack against critical infrastructure in the U.S.—the attack on the Colonial Pipeline. The devastating attack served as a cautionary tale of ...

TSA Issues Directive to Prevent Another Colonial Pipeline Attack
Following months of pushback from private industry, the Transportation Security Administration (TSA) reissued a revised version of its cybersecurity directive for oil and natural gas pipeline owners and operators. The directive follows ...

The New Realities of Ransomware
Alan Shimel and Mike Rothman from Securosis and DisruptOps talk Colonial Pipeline, JBS and all things ransomware. The video is below followed by a transcript of the conversation. Alan Shimel: Hey, everyone ...

Critical Infrastructure Attacks Spur Cybersecurity Investment
The attacks on critical industrial systems such as Colonial Pipeline last year pushed industrial cybersecurity to center stage. And with the threat of war between Russia and Ukraine, experts warned nations that ...

Ransomware as a Service: A Thriving Business for Hackers
Ransomware as a service has become quite a popular and profitable business for cybercriminals. These cybercriminals often collaborate with malware developers and carry out coordinated cyberattacks. This approach to a ransomware attack ...
At Request of U.S., Russia Rounds Up 14 REvil Ransomware Affiliates
The Russian government said today it arrested 14 people accused of working for "REvil," a particularly aggressive ransomware group that has extorted hundreds of millions of dollars from victim organizations. The Russian ...

Best of 2021 – DarkSide Ransomware Gang Struck Down — but by Whom?
DarkSide, hackers of the Colonial Pipeline, has hurriedly shut up shop. It claims that its servers and cryptocurrency balances have disappeared ...