{"id":42744,"date":"2021-05-19T10:32:26","date_gmt":"2021-05-19T07:32:26","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=42744"},"modified":"2025-08-31T00:35:24","modified_gmt":"2025-08-30T21:35:24","slug":"study-finds-darkside-victims-paid-about-90-million-in-bitcoin","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/study-finds-darkside-victims-paid-about-90-million-in-bitcoin\/","title":{"rendered":"Study finds DarkSide victims paid about $90 million in Bitcoin"},"content":{"rendered":"<p>Elliptic analysts analysed 47 Bitcoin wallets believed to belong to the DarkSide hacking group. According to <a href=\"https:\/\/www.elliptic.co\/blog\/darkside-ransomware-has-netted-over-90-million-in-bitcoin\" target=\"_blank\" rel=\"noreferrer noopener\">the study<\/a>, over nine months the attackers received about $90 million in Bitcoin from victims.<\/p>\n<p>According to analysts, the DarkSide malware compromised about 99 organisations. Nearly half of them paid the ransom, and the average payment was $1.9 million.<\/p>\n<p>DarkSide operates on a ransomware-as-a-service (RaaS) model, providing its malware to third-party hackers.<\/p>\n<p>Any ransom paid by the victim is split between the intruders and the software developers. In the case of DarkSide, the developer takes 25% for ransoms under $500,000, but this share decreases to 10% for ransoms above $5 million, according to Elliptic.<\/p>\n<p>DarkSide <a href=\"https:\/\/forklog.com\/en\/news\/hackers-from-russia-linked-to-colonial-pipeline-attack-via-ransomware\">attacked the American company Colonial Pipeline<\/a>, stealing about 100 GB of data and locking computer systems.<\/p>\n<p>According to media reports, Colonial Pipeline paid the attackers <a href=\"https:\/\/forklog.com\/en\/news\/media-colonial-pipeline-paid-hackers-a-5-million-ransom-in-cryptocurrency\">75 BTC<\/a>. This is corroborated by Elliptic&#8217;s data, which previously <a href=\"https:\/\/forklog.com\/en\/news\/elliptic-bitcoin-wallet-used-by-darkside-hackers-has-received-17-5m-since-march\">uncovered a Bitcoin wallet<\/a>, allegedly used by DarkSide to receive the ransom from victims.<\/p>\n<p>Read ForkLog&#8217;s Bitcoin news on our <a href=\"\/\/telegram.me\/forklog\" target=\"\u201c_blank\u201d\" rel=\"\u201cnofollow\u201d noopener\">Telegram<\/a> \u2014 cryptocurrency news, prices and analysis.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Elliptic analysts analysed 47 Bitcoin wallets believed to belong to the DarkSide hacking group. According to the study, over nine months the attackers received about $90 million in Bitcoin from victims.<\/p>\n","protected":false},"author":1,"featured_media":42745,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1785,1154],"class_list":["post-42744","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-buyout","tag-crimes"],"aioseo_notices":[],"amp_enabled":true,"views":"25","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/42744","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=42744"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/42744\/revisions"}],"predecessor-version":[{"id":42746,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/42744\/revisions\/42746"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/42745"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=42744"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=42744"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=42744"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}