{"id":7533,"date":"2021-06-30T20:19:41","date_gmt":"2021-07-01T03:19:41","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?p=7533"},"modified":"2023-04-05T12:39:58","modified_gmt":"2023-04-05T19:39:58","slug":"darkside-ransomware-threat-associations-unearthed","status":"publish","type":"post","link":"https:\/\/10.42.32.162\/articles\/darkside-ransomware-threat-associations-unearthed\/","title":{"rendered":"DarkSide Ransomware: Further Threat Associations Unearthed"},"content":{"rendered":"
\n

DarkSide Ransomware has added two more CVEs to its arsenal alongside two additional APT group associations. Check out our analysis and patch these vulnerabilities before they strike again!<\/p>\n<\/blockquote>\n

Last month, DarkSide ransomware went down in history for causing the single largest disruption in gasoline supply in the United States. The attack was so crippling that fuel prices peaked, panic buying was induced, and almost 45% of the East Coast\u2019s fuel supply was cut off. It took a week of reconstruction, alongside the FBI’s interference and a $5M ransom<\/a> payment, to bring the supply back online. Subsequently, the FBI recovered<\/a> about half of the ransom paid after gaining access to the bitcoin account that was used in the transaction.<\/p>\n

More CVE Findings<\/h2>\n

In our previous blog<\/a>, we observed how the DarkSide ransomware group utilized two vulnerabilities, CVE-2019-5544 and CVE-2020-3992, to launch its attacks on the Colonial Pipeline. Since then, we have come across more interesting findings about this ransomware.<\/strong><\/p>\n

\n

It has come to light that two additional CVEs, CVE-2020-1472 and CVE-2021-20016,\u00a0are part of the DarkSide attack arsenal.<\/h4>\n<\/blockquote>\n

\"Darkside<\/p>\n

CVE-2021-20016<\/strong><\/p>\n