The U.S. Department of State announced a reward offer of up to $10,000,000 for information leading to the identification or location of any individual(s) who hold(s) a key leadership position in the DarkSide ransomware variant transnational organized crime group. In addition, the Department is also offering a reward offer of up to $5,000,000 for information leading to the arrest and/or conviction in any country of any individual conspiring to participate in or attempting to participate in a DarkSide variant ransomware incident.
The FBI has said DarkSide was responsible for the May cyber attack targeting the Colonial Pipeline, causing a days-long shutdown that led to a spike in gas prices, panic buying, and localized fuel shortages in the U.S. Southeast.
Colonial Pipeline has said it paid the hackers nearly $5 million in Bitcoin to regain access to its systems. The U.S. Justice Department in June recovered about $2.3 million of the ransom. The State Department in July offered a reward of up to $10 million for information leading to the identification or location of any person who, while acting at the direction or under the control of a foreign government, participated in malicious cyber activities against U.S. critical infrastructure.
“In offering this reward, the United States demonstrates its commitment to protecting ransomware victims around the world from exploitation by cyber criminals. The United States looks to nations who harbor ransomware criminals that are willing to bring justice for those victim businesses and organizations affected by ransomware,” the press statement of the U.S. Department reads.
This reward is offered under the Department of State’s Transnational Organized Crime Rewards Program (TOCRP). More than 75 transnational criminals and major narcotics traffickers have been brought to justice under the TOCRP and the Narcotics Rewards Program (NRP) since 1986. The Department has paid more than $135 million in rewards to date.