Accessibility links

Breaking News

U.S. Offers Reward For Information On Russia-Linked DarkSide Cybercrime Group

(illustrative photo)
(illustrative photo)

The United States has announced a reward of up to $10 million for information leading to the identification or location of any individual holding a “key leadership” position in DarkSide, a cybercrime group believed to be tied to Russia.

The State Department said in a statement on November 4 that it was also offering a reward of up to $5 million for information leading to the arrest or conviction in any country of an individual “conspiring to participate in or attempting to participate” in a DarkSide ransomware incident earlier this year.

The FBI identified the DarkSide syndicate behind the largest publicly disclosed cyberattack against critical infrastructure in the United States.

The group disbanded after its ransomware attack on Colonial Pipeline disrupted fuel service to the U.S. East Coast for six days in May.

Colonial Pipeline officials eventually paid a ransom of more than $4 million. The Justice Department later said it had recovered most of the bitcoin ransom.

At the time, President Joe Biden said that U.S. officials do not believe the Russian government was involved in the hack but added: “We do have strong reason to believe that the criminals who did the attack are living in Russia. That’s where it came from.”

“In offering this reward, the United States demonstrates its commitment to protecting ransomware victims around the world from exploitation by cyber criminals,” the State Department said in its statement.

It added that the United States “looks to nations who harbor ransomware criminals that are willing to bring justice for those victim businesses and organizations affected by ransomware.”

In September, another ransomware attack believed to be the work of Russian hackers forced an association of corn and soy farmers based in the U.S. state of Iowa to take its systems offline.

The attack was attributed to a group called BlackMatter, which security researchers believed may be a reconstituted version of DarkSide.

  • 16x9 Image


    RFE/RL journalists report the news in 27 languages in 23 countries where a free press is banned by the government or not fully established. We provide what many people cannot get locally: uncensored news, responsible discussion, and open debate.

RFE/RL has been declared an "undesirable organization" by the Russian government.

If you are in Russia or the Russia-controlled parts of Ukraine and hold a Russian passport or are a stateless person residing permanently in Russia or the Russia-controlled parts of Ukraine, please note that you could face fines or imprisonment for sharing, liking, commenting on, or saving our content, or for contacting us.

To find out more, click here.