malware family
DarkSide
unknownentity:malware_familyransomware · 1 source
Darkside, the latest ransomware operation to emerge has been attacking organizations beginning earlier this month. Darkside’s customized attacks on companies have already garnered them million-dollar payouts.
Curated · btcintel
claims we make, each with its source and citation · sources may contradict; we show the set, never a score
Facts
- id
- darkside
- kind
- malware family
- status
- unknown
- aliases
- BlackMatter
- jurisdictions
- —
- claims naming it
- 10 · 0 attributions · 0 relations · 0 events
Identifiers
- misp-galaxy f514a46e-53ff-4f07-b75a-aed289cf221fvia misp-galaxy-ransomware
Relations
computedno relations recorded for this entity
Events
computedno dated events recorded for this entity
Claims naming this entitynewest first · 10 of 10
- DarkSideransomwarepaymentsourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencepayment bc1qhq37atw5ldcppf2fd0fsmsmejxkvp2qfy472pq · 7,850,000,000 sat · time 2021-05-11 20:55 UTC · url https://ransomwhe.re/#address/bc1qhq37atw5ldcppf2fd0fsmsmejxkvp2qfy472pqfetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3ann_25761btcintel:annotations:25761@v3 sha256:6cacc6eb054226caconfidencetrusted provider · 50
- DarkSideransomwarepayment addresssourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencefamily raw DarkSide · url https://ransomwhe.re/#address/bc1qhq37atw5ldcppf2fd0fsmsmejxkvp2qfy472pqfetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2ann_25760btcintel:annotations:25760@v2 sha256:d6d83687d76d3b9cconfidencetrusted provider · 50
- BlackMatterransomwarepaymentsourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencepayment bc1q2855268hg3lm34qwk5jvnnjm762ef8rkdvyjez · 31,200 sat · time 2021-07-30 20:21 UTC · url https://ransomwhe.re/#address/bc1q2855268hg3lm34qwk5jvnnjm762ef8rkdvyjezfetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3ann_25063btcintel:annotations:25063@v3 sha256:7316e9724cfd5cbeconfidencetrusted provider · 50
- BlackMatterransomwarepaymentsourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencepayment bc1q2855268hg3lm34qwk5jvnnjm762ef8rkdvyjez · 9,638,600,000 sat · time 2021-07-30 21:43 UTC · url https://ransomwhe.re/#address/bc1q2855268hg3lm34qwk5jvnnjm762ef8rkdvyjezfetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3ann_25062btcintel:annotations:25062@v3 sha256:2e2aaf303af08bfeconfidencetrusted provider · 50
- BlackMatterransomwarepayment addresssourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencefamily raw BlackMatter · url https://ransomwhe.re/#address/bc1q2855268hg3lm34qwk5jvnnjm762ef8rkdvyjezfetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2ann_25061btcintel:annotations:25061@v2 sha256:68b9e15583a26500confidencetrusted provider · 50
- DarkSideransomwarepaymentsourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencepayment bc1qjhdw0582hu8sl2l56dyu9l4rk366hhu7j5xpgu · 520,856,738 sat · time 2021-02-15 22:35 UTC · url https://ransomwhe.re/#address/bc1qjhdw0582hu8sl2l56dyu9l4rk366hhu7j5xpgufetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3ann_3120btcintel:annotations:3120@v3 sha256:1f9d34fddde46cb9confidencetrusted provider · 50
- DarkSideransomwarepayment addresssourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencefamily raw DarkSide · url https://ransomwhe.re/#address/bc1qjhdw0582hu8sl2l56dyu9l4rk366hhu7j5xpgufetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2ann_3119btcintel:annotations:3119@v2 sha256:b660bff31948bcd0confidencetrusted provider · 50
- DarkSideransomwarepaymentsourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencepayment bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsf · 1,693 sat · time 2021-05-08 17:20 UTC · url https://ransomwhe.re/#address/bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsffetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3ann_2005btcintel:annotations:2005@v3 sha256:08c6b6490b5ba59bconfidencetrusted provider · 50
- DarkSideransomwarepaymentsourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencepayment bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsf · 7,499,998,307 sat · time 2021-05-08 17:29 UTC · url https://ransomwhe.re/#address/bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsffetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3ann_2004btcintel:annotations:2004@v3 sha256:342206df419b55c0confidencetrusted provider · 50
- DarkSideransomwarepayment addresssourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencefamily raw DarkSide · url https://ransomwhe.re/#address/bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsffetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2ann_2003btcintel:annotations:2003@v2 sha256:dd1714cabc1a894bconfidencetrusted provider · 50
Subjects10 subjects carry a claim naming this entity · a sample
- bc1q2855268hg3lm34qwk5jvnnjm762ef8rkdvyjezaddress
- bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsfaddress
- bc1qhq37atw5ldcppf2fd0fsmsmejxkvp2qfy472pqaddress
- bc1qjhdw0582hu8sl2l56dyu9l4rk366hhu7j5xpguaddress
- 12bef985403eb8527207483dd6e7a45ffa2253187734a43cf74a44c994a24ef3tx
- 3bdb1d1deb8a638b4de7777876bb7724b885f873c905a81a383f90d2731bd7e4tx
- 72dbd8edc8a56e15be7b5911592407f3608eaf652ee71773f6e47666bd2b2873tx
- 915fb4f0a030937f2c1d2210996e8eb32b5a41b331965c7ec78961923775bd62tx
- 9a79383033811ad7ec2e39846561c9f48f87995b8fdaebe06e1365e6e1a5988ctx
- fc78327d4e46dac01dc313067b1ac7f274cdb3a07ea9f28f6f71473145f1b264tx
Community
notes from Nostr labelers · never merged with the bands above · not endorsed
Community content is indexed from Nostr and not endorsed by btcintel.
not computed yetNot indexed yet: the community index has not looked at this subject.