Powered by MOMENTUM MEDIA
cyber daily logo

Breaking news and updates daily. Subscribe to our Newsletter

Breaking news and updates daily. Subscribe to our Newsletter X facebook linkedin Instagram Instagram

ALPHV site reportedly downed by law enforcement

The prolific ALPHV ransomware gang has had its site taken down for days, with the main suspect for the outage being law enforcement.

user icon Daniel Croft
Mon, 11 Dec 2023
ALPHV site reportedly downed by law enforcement
expand image

The group, which also goes by BlackCat, had its leak site taken down late last week (7 December), preventing parties seeking to access stolen data or listings from doing so.

At the time of writing, Cyber Daily has observed that the site is still down, despite the group having said earlier that it should be up soon.

ALPHV’s server admin’s Tox Status hints that repairs are underway, but no details on how the site was taken down or how long it is expected to be down have been revealed.

============
============

While a culprit for the outage has yet to be formally identified, the main suspect is believed to be a law enforcement agency, more specifically, the FBI.

A number of cyber experts have expressed their beliefs regarding the FBI’s responsibility on social media.

One group called RedSense Intelligence published a post on X (formerly Twitter) saying it was able to confirm that law enforcement was responsible for the outage.

While there is currently no concrete evidence to suggest that law enforcement is behind ALPHV’s site going down, prior law enforcement operations have resulted in similar outages, such as the FBI attacks on REvil and Hive.

The ALPHV ransomware gang is one of the largest and most active ransomware groups, having been responsible for some of the largest cyber attacks in recent history, including the attack on Australian law firm HWL Ebsworth that led to breaches of a number of government agencies, the big four banks and more.

It was also responsible for the MOVEit hack, which racked up a similarly large list of high-profile victims, including US government agencies.

Daniel Croft

Daniel Croft

Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.

cd intro podcast

Introducing Cyber Daily, the new name for Cyber Security Connect

Click here to learn all about it
newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.