DarkSide hackers in focus after Toshiba attack

A unit of Japan’s Toshiba Corp said on Friday it had been hacked in Europe by the DarkSide ransomware group widely believed to have been behind a crippling fuel pipeline attack in the United States this week.

Who are DarkSide?

Experts who have tracked DarkSide said it emerged in the middle of last year and appears to be composed of veteran cybercriminals who are focused on squeezing as much money as they can from targets.

“They’re very new but they’re very organized,” Lior Div, the chief executive of Boston-based security firm Cybereason, said this week when asked about the Colonial Pipeline attack.

“It looks like someone who’s been there, done that.”