US Says 'Russia-based' Group DarkSide Behind Pipeline Hack
Faizan Hashmi Published May 11, 2021 | 01:50 AM
Washington, (UrduPoint / Pakistan Point News - 11th May, 2021 ) :President Joe Biden said Monday that a Russia-based group was behind the ransomware attack that forced the shutdown of the largest oil pipeline in the eastern United States.
The FBI identified the group behind the hack of Colonial Pipeline as DarkSide, a shadowy operation that surfaced last year and attempts to lock up corporate computer systems and force companies to pay to unfreeze them.
"So far there is no evidence ... from our intelligence people that Russia is involved, although there is evidence that actors, ransomware is in Russia," Biden told reporters.
"They have some responsibility to deal with this," he said.
Three days after being forced to halt operations, Colonial said Monday it was moving toward a partial reopening of its 5,500 miles (8,850 kilometers) of pipeline -- the largest fuel network between Texas and New York.
At the White House, Deputy National Security Advisor Elizabeth Sherwood-Randall said Biden was being kept updated on the incident, which threatened to crimp supplies of gasoline, diesel fuel and jet fuel across much of the eastern United States.
Colonial said in a statement that "segments of our pipeline are being brought back online." "Colonial has told us that it has not suffered damage and can be brought back online relatively quickly," Sherwood-Randall said, with no fuel disruptions so far.
- Seeking ransom - The ransomware forced the company to shut down pipeline controls system for safety reasons.
DarkSide began attacking medium and large-sized companies mostly in Western Europe, Canada and the United States last year, reportedly asking for anywhere from a few hundred thousand Dollars to a few million dollars, to be paid in Bitcoin.
In return, DarkSide supplies the company with a program that will unlock the its computing systems.
They also download and retain large amounts of data from the company, threatening to release it publicly if the company does not pay up.
In a statement on their website on the dark net, they rejected allegations that they had any official backing.
"We are apolitical, we do not participate in geopolitics, do not need to tie us with a defined government and look for other our motives," it said.
"Our goal is to make money, and not creating problems for society. " Dmitri Alperovitch, one of the foremost cybersecurity experts who cofounded the firm CrowdStrike, said his group believes DarkSide enjoys official protection in Russia.
"A ransomware group we believe is operating (and likely harbored) by Russia has shutdown a company that is moving 45% of petroleum supplying the East Coast. Is it a criminal act? Sure," he tweeted.
He said it also "undoubtedly" has "huge" national security implications, especially in US-Russia relations.
Another cybersecurity expert, Brett Callow of Emsisoft, told NBC news that an indication of the group's origins is that its software is designed to not work on computers whose default languages are Russian or several other eastern European languages.
"DarkSide doesn't eat in Russia," Callow told NBC.
Anne Neuberger, deputy national security adviser for cyber, said most ransomware comes from transnational criminal groups.
Asked if Colonial Pipeline or other companies should pay the ransom, she said the Biden adminstration has not offered advice on that.
"They have to balance the cost-benefit when they have no choice with regard to paying a ransom," she said. "Typically that is a private sector decision."
Related Topics
Recent Stories
HEC reviews curricula for environmental sciences degree programme
ICC Asia looking forward to an action-packed Asia Cricket Week
Yuvraj Singh named ICC Men’s T20 World Cup 2024 Ambassador
Greece hands Olympic flame to 2024 Paris Games hosts
Two Kyiv hospitals evacuating over feared Russian strikes
World must act on neurotech revolution, say experts
Charles & Catherine's cancer diagnoses
Champions Alcaraz and Sabalenka through in Madrid Open
King Charles to resume some public duties during cancer treatment: palace
US defense chief announces $6 bn in security aid for Ukraine
Heavy rains cause damage to Spezand-Taftan railway track
Woman stabbed in Israel, attacker killed: police
More Stories From Miscellaneous
-
Modern Education Techniques: A pathway to achieve economic development
14 hours ago -
Kite Flying: From cultural festival to deadly sport
14 hours ago -
PDMA predicts gusty wind, rain with thunder, hails
3 days ago -
Iranian president Raisi given guard of honour at PM House
5 days ago -
Intellectuals, writers accolades Naseer Mirza on his literary contribution
5 days ago -
Bahawalpur Adabi Sangat hosts memorable mushaira
5 days ago
-
Cattle farming vital to alleviate poverty in rural areas
5 days ago -
Pakistan: A land of tourism, archeological wonders
6 days ago -
Transforming education sector: from job hunters to job creators
8 days ago -
Amjad Bobby remembered on 19th death anniversary for timeless contributions to music
12 days ago -
Legendary actor Nadeem’s 26 films released on Eid-ul-Fitr days in 50 years
12 days ago -
Besant Hall Cultural Centre to celebrate evening with Sanam Marvi on 26 April
12 days ago