DarkSide / BlackMatter

DarkSide BlackMatter Carbon Spider

▲ High Threat

Colonial Pipeline attack (2021) causing US fuel shortage, rebranded to BlackMatter after shutdown

Origin Russia

Sponsor Financially motivated criminal group

Active Since 2020

Motivation Financial gain (ransomware)

Target Sectors

Energy Industrial Manufacturing Healthcare

RaaS affiliate model

Double extortion

ESXi encryption

Active Directory exploitation

Legitimate tool abuse

Hacking the mainframe…