The Colonial Pipeline ransomware gang is back under a new name

You probably remember the ransomware attack against Colonial Pipeline: On May 7, a Russian cybergang under the name DarkSide hacked the company that operates the largest fuel pipeline in the US. The hackers knocked the pipeline offline, creating temporary gas shortages, and demanded a $5 million ransom in exchange for ending their attack.

You may also recall what happened next. The attack lit up social media and outraged Americans who waited for hours to refill their tanks. US president Joe Biden announced law enforcement would “pursue a measure to disrupt [DarkSide’s] ability to operate.” Realizing they may have bitten off more than they could chew, DarkSide released a statement on May 10 vowing to “avoid social consequences in the future.” But it was too late. By May 14, the hackers announced their servers had been knocked offline, their bitcoin had been stolen from their wallets, and they would be shutting down their operation “due to pressure from the US.” On June 7, the FBI triumphantly announced it had recovered $2.3 million from the Colonial Pipeline ransom.

The hackers are back

Read the rest of this story on qz.com. Become a member to get unlimited access to Quartz’s journalism.