Researchers at FortiGuard Labs have uncovered another DarkSide Ransomware variant with destructive capabilities. Researchers say the variant is “unrelated to the Colonial Pipeline campaign” and no longer active. It had been used in an attack campaign designed to enable attackers to cause wider disruption. The malware began its operation by locating a domain controller used for security authentication requests. Researchers note that the technique used to identify the partition locator and customization based on the victims’ operating systems was also deployed in the NotPetya malware outbreak.”]
Source: https://www.cuinfosecurity.com/researchers-uncover-another-darkside-ransomware-variant-a-16704