BlackMatter ransomware ceases operation due to police pressure
Shutdowns in the criminal underground are often a prelude to rebranding
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
The BlackMatterransomwaregang has reportedly decided to call it quits, citing recent operations against it from the law enforcement agencies.
The news comes courtesy of a screenshot of a message allegedly shared by BlackMatter operatives with their “clients”. The message, posted on November 1, and originally shared bycybersecurityresearch group VX-Underground, suggested the group will shutdown within 48 hours.
“Due to certain unsolvable circumstances associated with pressure from the authorities (part of the team is no longer available, after the latest news) - project is closed,”readsa rough English translation of the Russian post.
We’re looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won’t take more than 60 seconds of your time, and we’d hugely appreciate if you’d share your experiences with us.
Click here to start the survey in a new window«
Like most notorious ransomware gangs, BlackMatter operates through a ransomware-as-a-service (RaaS) model, and hosts a website to engage and communicate with its affiliates, which is where the message was posted.
Rise like a phoenix
Even if the post is legitimate, the message doesn’t mean that the ransomware gang will stop extorting victims. In fact, in the post itself, BlackMatter asks affiliates to get in touch in case they need the decryptor for BlackMatter’s ransomware, hinting that it wouldn’t stop its affiliates from taking more victims.
Furthermore, reporting on the development,BleepingComputerarguesthat although the group claimed that it will close its door within 48 hours, the time has come and gone but the gang’sTorpayment portal and data leak website remain operational.
Realistically speaking, such shutdowns are a mere hogwash, and a prelude to the ransomware gang re-emerging under a new name, saysBleepingComputer.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
In fact, BlackMatter itself is arebrand of the DarkSide gang, which shut down after it attracted a lot of heat from the law enforcement following theattack on Colonial Pipeline.
Don’t rely on such shutdowns to save yourself from ransomware attacks. Rather use one of thesebest firewall apps and servicesto shield your networks, and ensure your computers are running thesebest endpoint protection toolsto add another layer of defense against cyber-attacks.
With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’sTechRadar Pro’sexpert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.
Phishing attacks surge in 2024 as cybercriminals adopt AI tools and multi-channel tactics
This new phishing strategy utilizes GitHub comments to distribute malware
Smeg Combi Steam Oven review: a multi-functional countertop oven that looks stunning and cooks well
