US national security officials are still scrambling to get to the bottom of this weekend’s Colonial Pipeline ransomware attack that was believed to have been executed by a gang of Russian cybercriminals, and Colonial Pipeline itself is struggling to contain the fallout from the attack on this major …
US national security officials are still scrambling to get to the bottom of this weekend’s Colonial Pipeline ransomware attack that was believed to have been executed by a gang of Russian cybercriminals, and Colonial Pipeline itself is struggling to contain the fallout from the attack on this major US fuel pipeline — and to get things up and running again as soon as possible. Meanwhile, on Monday morning the FBI released a statement confirming the speculation in news reports that started trickling out on Sunday. It confirms that DarkSide, a relatively new but very experienced gang of Russian cybercriminals, is behind the Colonial Pipeline ransomware attack, with DarkSide itself even posting a statement to its own website, for good measure, claiming responsibility for the incident. As we noted over the weekend, the hackers stole almost 100GB of data from the pipeline operator before locking its computer network down, which led to Colonial then taking its operational network offline out of what it said was an abundance of caution.
