The Patching Friars' AlmanacA calendar of CVE saints
DarkSideHoly card for d-darkside, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 DS DarkSide TUBUS SICCUS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Circle III · Ransomware and extortion

The Demon DarkSide, Who Drained a Pipeline

Legend

Appearing in August 2020 as ransomware for hire, in May 2021 it hit Colonial Pipeline, causing the pipeline to shut down and queues at petrol stations on the US East Coast. The Justice Department later recovered 63.7 of the 75 bitcoin paid, about $2.3 million. Shortly afterwards the group announced it was shutting down.

Exorcism

Cast it out by separating IT from operational networks and closing forgotten VPN accounts or those without MFA. A continuity plan that does not depend on online billing avoids stopping everything out of caution.

Technical record

Circle
Circle III · Ransomware and extortion
First seen
2020
Status
Dormant
Works
The Scourge of the Pipeline · The Miracle of the Recovered Ransom

A ransomware-as-a-service operation first seen in August 2020. Its May 2021 attack on Colonial Pipeline caused fuel shortages on the US East Coast; the DOJ later recovered 63.7 of the 75 bitcoin paid (about $2.3 million). DarkSide announced it was shutting down days later and is widely seen as having rebranded as BlackMatter.

Sources: justice.gov · cisa.gov

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.