DarkSide, the cybercrime syndicate behind the Colonial Pipeline attack, claims it lost control of its infrastructure. DarkSide’s dark web sites, including its blog, ransom collection site, and breach data content delivery network (CDN) servers, have gone dark and remain inaccessible as of writing. The development comes as DarkSide closed its Ransomware-as-a-Service (RaaS) affiliate program for good “due to the pressure from the U.S.,” with the group stating that they would issue decryptors to all their affiliates for the companies that were attacked.
Source: https://thehackernews.com/2021/05/us-pipeline-ransomware-attackers-go.html