Heartwarming Story of the Week: 2 Ransomware Gangs Meet Their Demise

Enlarge Getty Pictures

From THE warm and fluffy files come This feel good Friday job, chronic This weeks disassemble of two hated Ransomware groups. A disappeared on Tuesday, allegedly After be pirate by A band affirming allegiance has Ukraine. THE other was taken out A day later THANKS has A international police net.

THE First of all band, call himself Trine, saw THE content on It is dark the Web victim name and shame site drawn down And replaced with A banner proclaiming: “Trigon East disappeared! THE waiters of Trine Ransomware gang has has been infiltrate And wiped out." A outfit call himself Ukrainian Cyber Alliance took credit And included THE slogan : “disturbing Russian criminal companies (both public And private) Since 2014. »

Enlarge

Poor operational security

A social media job Since A user affirming has be A Ukrainian Cyber Alliance press secretary said her band target Ransomware groups partially because they consider themselves out of reach of Western law application.

"We just find A gang as that And did has them as they TO DO has THE rest," THE press secretary wrote. “Downloaded their waiters (ten of them), deleted All And degraded For THE last time. TOR doesn't help them Or even awareness they had A hole In he. Their entire Infrastructure East completely breath far. Such A hunting forward.'"

A separated social media job abandoned What THE press secretary said was A administrative sign key And said THE band wiped out Trigona "landing, Blog, leaks site, internal server (rocket, Atlasian), wallets And developer waiters." THE person Also claims that THE Ukrainian Cyber Alliance pirate A Confluence server Trine used.

Enlarge / Screenshot showing alleged hacker control of Trine Confluence server.

By Friday, THE Trine site was unavailable, as highlighted by THE message “Bunionitis not found."

Trine First of all surfaced In 2022 with close ties has Ransomware groups known as CryLock And Black cat And looser ties has ALPHV. He mostly pirate companies In THE WE And India, follow up by Israel, Turkey, Brazil, And Italy. He was known For compromising MYSQL waiters, often by bully force Passwords. A June profile of THE band by researchers Since security farm Orient yourself Microphone note that THE groups technical sophistication was mixed.

"THE Trine Ransomware band has poor operational security When he come has THE Implementation of Tor sites - although their aim of targeting poorly managed SQL waiters East not something We generally see with less technically competent threat actors," THE job said.

THE chronology of THE To hack, base on THE social media posts, suggest...