Hackers behind Colonial Pipeline attack claim three new victims including Scottish building firm

The ransomware group responsible for the attack on Colonial Pipelines system have targeted three other more companies, CNBC reports.

DarkSide, a Russian-based hacker group, was named by the FBI as being responsible for the ransomware attack that Georgia-based Colonial Pipelines first reported on Friday. The attack forced the company to shutdown its 5,500-mile pipeline, causing gas prices to rise and fuel shortages across the Southeast.

The hackers have since revealed three new companies they targeted within the last 24 hours on its site on the dark web, called DarkSide Leaks.

One of the companies targeted is United States-based technology services reseller that’s located in Illinois, according to the CNBC report. In an online post, the hackers boasted stealing more than 600 gigabytes of sensitive information that included passwords and financial information.

Then a Brazil-based reseller of renewable energy products and Scotland-based construction company were also targeted in the attack. Both hacks involved DarkSide taking hundreds of gigabytes of information from the companies.

None of the three companies are involved in a country’s critical infrastructure, unlike Colonial Pipelines, but it indicates that DarkSide was not willing to back down from its criminal activities despite facing an FBI investigation. These new hacks would’ve likely gone under the radar if it wasn’t for DarkSides newfound notoriety.

DarkSide appeared to express regret on Monday in a statement released on its dark web site after realising the extent of the damage caused by the Colonial Pipeline attack.

“We are apolitical, we do not participate in geopolitics, do not need to tie us with a defined government and look for our motives,” the statement said, CNBC reports. “Our goal is to make money, and not creating problems for society. From today we introduce moderation and check each company that our partners want to encrypt to avoid social consequences in the future.”

The ransomware group boasts a Robin Hood persona by claiming it only targets large corporations that are not related to medical, educational, or government entities. A portion of the money earned by the group during these ransomware attacks are then donated to charities.

But several attacks from DarkSide have veered away from the group’s “ethical” code.

More follows …