DarkSide is a ransomware threat that has been in operation since at least August 2020. It was used in a cyberattack against Georgia-based Colonial Pipeline, leading to a major fuel supply disruption along the East Coast of the US. The malware is offered as a service to different cybercriminals through an affiliate program. The group also claims that it doesn’t attack medical facilities, funeral services, non-profit organizations, educational institutions, or government organizations because of its “principles” The claims about donations and not targeting certain types of organizations have not been verified and should be met with a heightened degree of scrutiny.”]