Close Menu
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

What's On

The ‘Click-to-Cancel’ Rule Was Killed, but Consumer Advocates Could Revive It

10 July 2025

The Peloton Tread, Bike, and Row Are On Sale for Amazon Prime Day

10 July 2025

The Best Dyson Prime Day Deals on Vacuums, Fans, and Hair Tools

10 July 2025
Facebook X (Twitter) Instagram
Just In
  • The ‘Click-to-Cancel’ Rule Was Killed, but Consumer Advocates Could Revive It
  • The Peloton Tread, Bike, and Row Are On Sale for Amazon Prime Day
  • The Best Dyson Prime Day Deals on Vacuums, Fans, and Hair Tools
  • The UE Boom 4 Prime Day Sale Lets You Bring the Party Anywhere for Less
  • The 100 Best Prime Day Deals Under $100 on Gear You Actually Want
  • Sony’s New WH-1000XM6 Headphones Are Finally on Sale This Prime Day
  • Stalker 2 Is Coming To PlayStation 5 Later This Year
  • The 13 Best Prime Day Kindle Deals and Amazon Device Sales
Facebook X (Twitter) Instagram Pinterest Vimeo
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release
Subscribe
Best in TechnologyBest in Technology
Home » A Major Ransomware Takedown Suffers a Strange Setback
News

A Major Ransomware Takedown Suffers a Strange Setback

News RoomBy News Room19 December 20233 Mins Read
Share Facebook Twitter Pinterest LinkedIn Tumblr Reddit Telegram Email
Share
Facebook Twitter LinkedIn Pinterest Email

“Law enforcement is moving a lot faster, but it is still not fast enough,” says Allan Liska, an analyst for the security firm Recorded Future who specializes in ransomware. “It takes a while to build a case, and in the meantime these groups wreak havoc.”

Part of the reason for law enforcement’s delay in attempting to take down Alphv’s infrastructure may have been an ongoing investigation into the actors behind the group. Alphv/BlackCat seems to have evolved from a gang known as BlackMatter, which, in turn, seemed to emerge as a recombination of the notorious Darkside ransomware group that targeted Colonial Pipeline in the US.

“This isn’t their first shit show. Unfortunately, it probably won’t be their last either,” says Brett Callow, a threat analyst at antivirus company Emsisoft. “But Alphv’s partners in crime will be wondering, what information law enforcement was able to collect? And who does it implicate?”

The takedown effort involved collaboration and parallel investigations from multiple law enforcement agencies, including those in the United Kingdom, Australia, Germany, Spain, and Denmark. The US Justice Department said Tuesday that a decryptor tool for the Alphv ransomware that was developed by the FBI has already helped more than 500 victims recover from attacks and avoid paying roughly $68 million in ransoms.

As ransomware groups rely more on a hybrid model, in which much of their leverage for extortion comes from the threat that they will leak data stolen from victims, decryptors are only one of many tools needed to help victims avoid paying ransoms. But Alphv’s attempt on Tuesday afternoon to let its customers use its ransomware for attacks on vital services like hospitals and nuclear plants made the existence of the decryptor more significant, given how dangerous and disruptive that activity might be.

“The statement about targeting critical infrastructure is pretty concerning. This will be an ongoing battle, for sure. Law enforcement will have to aggressively roll out the decryption keys and tools for victims,” says Alex Leslie, a threat intelligence analyst at Recorded Future. “And data extortion is still on the table. Generally speaking, data extortion wouldn’t be as disruptive in terms of a national security crisis in the short term, but who knows.”

A search warrant released by the FBI says that law enforcement got login credentials for the ransomware gang’s platforms from a “confidential human source” with access to the group. Though it was not immediately clear how Alphv had “unseized” its site following the law enforcement action, researchers began to coalesce around some theories on Tuesday afternoon. Since both the cybercriminals and law enforcement had access to the login keys, it’s possible that multiple sites were registered to the same Tor address or that Alphv was able to add another registration and then point the site to servers that law enforcement did not control. In the same way, though, law enforcement’s presumably deep access to the gang’s infrastructure is likely what allowed it to retake the site.

The US Justice Department noted Tuesday morning that people with information about Alphv/Blackcat and its affiliates should come forward and may still be may be eligible for a reward through the US State Department.

Updated 12/19/23, 2:55 pm ET to reflect that law enforcement reestablished its control of Alphv’s dark-web leak site.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
Previous ArticleThe Final Fantasy VII Rebirth Digital Issue Is Now Live!
Next Article Use Comcast for internet? Your personal data may have been hacked

Related Articles

News

The ‘Click-to-Cancel’ Rule Was Killed, but Consumer Advocates Could Revive It

10 July 2025
News

The Peloton Tread, Bike, and Row Are On Sale for Amazon Prime Day

10 July 2025
News

The Best Dyson Prime Day Deals on Vacuums, Fans, and Hair Tools

10 July 2025
News

The UE Boom 4 Prime Day Sale Lets You Bring the Party Anywhere for Less

10 July 2025
News

The 100 Best Prime Day Deals Under $100 on Gear You Actually Want

10 July 2025
News

Sony’s New WH-1000XM6 Headphones Are Finally on Sale This Prime Day

10 July 2025
Demo
Top Articles

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024101 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views

Oppo Reno 14, Reno 14 Pro India Launch Timeline and Colourways Leaked

27 May 202582 Views

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Latest News
News

Sony’s New WH-1000XM6 Headphones Are Finally on Sale This Prime Day

News Room10 July 2025
Gaming

Stalker 2 Is Coming To PlayStation 5 Later This Year

News Room10 July 2025
News

The 13 Best Prime Day Kindle Deals and Amazon Device Sales

News Room9 July 2025
Most Popular

The Spectacular Burnout of a Solar Panel Salesman

13 January 2025124 Views

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024101 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views
Our Picks

The UE Boom 4 Prime Day Sale Lets You Bring the Party Anywhere for Less

10 July 2025

The 100 Best Prime Day Deals Under $100 on Gear You Actually Want

10 July 2025

Sony’s New WH-1000XM6 Headphones Are Finally on Sale This Prime Day

10 July 2025

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Facebook X (Twitter) Instagram Pinterest
  • Privacy Policy
  • Terms of use
  • Advertise
  • Contact Us
© 2025 Best in Technology. All Rights Reserved.

Type above and press Enter to search. Press Esc to cancel.