Jump directly to the content

FEDS recovered $2.3million of the Bitcoin ransom paid to the Colonial Pipeline hackers DarkSide after a cyber attack that caused a widespread gas crisis.

The Justice Department announced on Monday that it had "found and recaptured" 63.7 Bitcoins paid by the Colonial Pipeline company.

Deputy Attorney General Lisa Monaco said the Justice Department 'turned the tables on DarkSide'
4
Deputy Attorney General Lisa Monaco said the Justice Department 'turned the tables on DarkSide'Credit: Reuters
Last month's Colonial Pipeline hacking led to mass gas shortages
4
Last month's Colonial Pipeline hacking led to mass gas shortagesCredit: Reuters

Colonial said it paid hackers nearly $5million after along much of the East Coast last month.

The FBI identified , a Russia-based cybercrime group, as the culprit behind the hacking.

An affidavit filed on Monday said the FBI has gotten access to a private key to unlock the Bitcoin wallet that had received the majority of the funds from Colonial, .

It's not clear how the bureau obtained access to the key, but a judge in San Francisco reportedly approved seizing the funds from this "cryptocurrency address."

"Today, we turned the tables on DarkSide," Deputy Attorney General Lisa Monaco said on Monday at a news conference announcing the recapturing of funds.

People began panic buying gas after the pipeline shut down
4
People began panic buying gas after the pipeline shut downCredit: Reuters
A line to fuel up is seen in front of a Georgia gas station on May 11
4
A line to fuel up is seen in front of a Georgia gas station on May 11Credit: The Mega Agency

"By going after an entire ecosystem that fuels ransomware and digital currency, we will continue to use all of our tools and all of our resources to increase the costs and the consequences of ransomware attacks and other cyber-enabled attacks."

Authorities have stepped up their expertise in tracking the flow of digital money as ransomware has become a growing national security threat.

JBS meatpacking was also targeted in a ransomware attack on May 30.

The company for beef and pork plants located in Ottumwa, ; Worthington, ; Cactus, ; and Greeley, .

The attack affected some of its servers supporting its North American and Australian IT systems.

The attacks have put further strain on relations between the US and Russia.

At the news conference on Monday, Deputy FBI Director Paul Abbate said that the bureau was tracking more than 100 ransomware variants and that DarkSide itself had targeted at least 90 US companies.

Commerce Secretary Gina Raimondo said on Sunday that Joe Biden's administration is looking at "all of the options" to defend the country against ransomware criminals.

She said the issue will be pressed when the president meets with Russian President Vladimir Putin this month.

"We're not taking anything off the table as we think about possible repercussions, consequences or retaliation," Raimondo said.

Topics