Back to Threat Groups

darkside

INACTIVE

ransomware group

FireEye describes DARKSIDE as a ransomware written in C and configurable to target files whether on fixed, removable disks, or network shares. The malware can be customized by the affiliates to create a build for specific victims.

Victims
10
records
First Discovered
Aug 1, 2020
victim
Last Discovered
May 13, 2021
victim
Inactive Since
1,922
days
Countries
5
hit
Avg Discount
38%
4 settlements

Group Activity

Last 12 months
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026