The Times Australia
Friday, March 14, 2025 11:41:39 PM
The Times World News

.
The Times Real Estate

.

the top 5 most dangerous criminal organisations online right now

  • Written by Roberto Musotto, Research fellow, Edith Cowan University

On the internet, nobody knows you’re a dog!

These words from Peter Steiner’s famous cartoon[1] could easily be applied to the recent ransomware attack[2] on Florida-based software supplier Kaseya.

Kaseya provides software services to thousands of clients around the world. It’s estimated between 800 and 1,500 medium to small businesses[3] may be impacted by the attack, with the hackers demanding US$50 million (lower than the previously reported US$70 million[4]) in exchange for restoring access to data being held for ransom.

The global ransomware attack has been labelled[5] the biggest on record. Russian cybercriminal organisation REvil is the alleged culprit.

Despite its notoriety, nobody really knows what REvil is, what it’s capable of or why it does what they does — apart from the immediate benefit of huge sums of money. Also, ransomware attacks often involve vast distributed networks, so it’s not even certain the individuals involved would know each other[6].

Ransomware attacks are growing exponentially[7] in size and ransom demand — changing the way we operate online. Understanding who these groups are and what they want is critical to taking them down.

Here, we list the top five most dangerous criminal organisations currently online. As far as we know, these rogue groups aren’t backed or sponsored by any state[8].

DarkSide

DarkSide is the group behind the Colonial Pipeline[9] ransom attack in May, which shut down the US Colonial Pipeline’s fuel distribution network, triggering gasoline shortage concerns.

The group seemingly first emerged in August last year. It targets large companies[10] that will suffer from any disruption to their services — a key factor, as they’re then more likely to pay ransom. Such companies are also more likely to have cyber insurance[11] which, for criminals, means easy moneymaking.

DarkSide’s business model is to offer a ransomware service[12]. In other words, it carries out ransomware attacks on behalf of other, hidden perpetrator/s so they can lessen their liability. The executor and perpetrator then share profits.

Groups that offer cybercrime-as-a-service also provide online forum communications to support others who may want to improve their cybercrime skills.

This might involve teaching someone how to combine distributed denial-of-service (DDoS) and ransomware[13] attacks, to put extra pressure on negotiations. The ransomware would prevent a business from working on past and current orders, while a DDoS attack would block any new orders.

REvil

The ransomware-as-a-service group REvil is currently making headlines due to the ongoing Kaseya incident, as well as another recent attack on global meat processing company JBS[14]. This group has been particularly active in 2020-2021.

the top 5 most dangerous criminal organisations online right now REvil’s HappyBlog web site showing US$70m ransom demand. Author provided

In April, REvil stole technical data on unreleased Apple products from Quanta Computer, a Taiwanese company that assembles Apple laptops. A ransom of US$50 million[15] was demanded to prevent public release of the stolen data. It hasn’t been revealed whether or not this money was paid.

Clop

The ransomware Clop[16] was created in 2019 by a financially-motivated group responsible for yielding half a billion US dollars[17].

The Clop group’s speciality is “double-extortion”. This involves targeting organisations with ransom money in exchange for a decryption key that will restore the organisation’s access to stolen data. However, targets will then have to pay extra ransom to not have the data released publicly.

Historical examples reveal that organisations which pay a ransom once are more likely to pay again in the future. So hackers will tend to target the same organisations again and again, asking for more money each time.

the top 5 most dangerous criminal organisations online right now ClopLeaks website showing directly downloadable ransom files. Author provided

Syrian Electronic Army

Far from a typical cybercrime gang, the Syrian Electronic Army has been launching online attacks since 2011 to promote political propaganda. With this motive, they have been dubbed a hactivist[18] group.

While the group has links[19] with Bashar al-Assad’s regime, it’s more likely made up of online vigilantes[20] trying to be media auxiliary[21] for the Syrian army.

Their technique is to distribute fake news[22] through reputable sources. In 2013, a single tweet sent by them from the official account of the Associated Press, the world’s leading news agency, had the effect of wiping billions[23] from the stock market.

the top 5 most dangerous criminal organisations online right now The fake AP tweet from the Syrian Electronic Army. www.theatlantic.com/

The Syrian Electronic Army exploits the fact that most people online have a tendency to interpret and react to content with an implicit sense of trust. And they’re a prime example of how the boundaries[24] between crime and terror groups online are less distinct than in the physical world.

FIN7

If this list could contain a “super villain”, it would be FIN7. Another Russian-based group, FIN7 is arguably the most successful[25] online criminal organisation of all time. Operating since 2012, it mainly works as a business[26].

Many of its operations have been undetected for years. Its data breaches have exploited cross-attack[27] scenarios, wherein the data breach serves multiple purposes. For example, it may enable extortion through ransom while also allowing the attacker to use data against victims, such as by reselling it to a third party.

In early 2017, FIN7 was alleged to be behind an attack targeting companies providing filings[28] to the US Security and Exchange Commission. This confidential information was exploited and used to obtain ransom which was then invested on the stock exchange.

As such, the groups made huge sums of money by trading on confidential information. The insider trading[29] scheme facilitated by hacking went on for many years — which is why it’s not possible to quantify the exact amount of economic damage. But it’s estimated to be well over US$1 billion.

Organised crime vs organised criminals

When it comes to complex criminal organisations, techniques[30] evolve[31] and motives[32] vary.

The way they organise themselves and commit crimes online is very different from your local offline gang. Ransomware can be launched from anywhere in the world, so it’s very difficult to prosecute these criminals. Matters are made even more complicated when several parties coordinate across borders.

It’s no wonder the challenge for law enforcement agencies is significant. It’s crucial that authorities investigating an attack are sure it was indeed perpetrated by who they suspect. But to know this, they need all the help they can get.

Read more: Nothing like the mafia: cybercriminals are much like the everyday, poorly paid business worker[33]

References

  1. ^ famous cartoon (www.washingtonpost.com)
  2. ^ ransomware attack (www.nzherald.co.nz)
  3. ^ 800 and 1,500 medium to small businesses (www.itnews.com.au)
  4. ^ lower than the previously reported US$70 million (thewest.com.au)
  5. ^ labelled (www.cbsnews.com)
  6. ^ know each other (theconversation.com)
  7. ^ growing exponentially (theconversation.com)
  8. ^ sponsored by any state (cybernews.com)
  9. ^ Colonial Pipeline (www.bloomberg.com)
  10. ^ large companies (krebsonsecurity.com)
  11. ^ cyber insurance (www.reuters.com)
  12. ^ ransomware service (securityboulevard.com)
  13. ^ distributed denial-of-service (DDoS) and ransomware (krebsonsecurity.com)
  14. ^ global meat processing company JBS (www.zdnet.com)
  15. ^ ransom of US$50 million (www.theguardian.com)
  16. ^ Clop (www.mcafee.com)
  17. ^ half a billion US dollars (krebsonsecurity.com)
  18. ^ hactivist (www.akamai.com)
  19. ^ links (opennet.net)
  20. ^ online vigilantes (cvir.st-andrews.ac.uk)
  21. ^ media auxiliary (opencanada.org)
  22. ^ fake news (www.bbc.com)
  23. ^ wiping billions (www.washingtonpost.com)
  24. ^ boundaries (www.tandfonline.com)
  25. ^ successful (www.wired.com)
  26. ^ business (geminiadvisory.io)
  27. ^ cross-attack (www.fireeye.com)
  28. ^ companies providing filings (www.scmagazine.com)
  29. ^ insider trading (www.amf-france.org)
  30. ^ techniques (attack.mitre.org)
  31. ^ evolve (www.trendmicro.com)
  32. ^ motives (link.springer.com)
  33. ^ Nothing like the mafia: cybercriminals are much like the everyday, poorly paid business worker (theconversation.com)

Read more https://theconversation.com/holding-the-world-to-ransom-the-top-5-most-dangerous-criminal-organisations-online-right-now-163977

The Times Features

Why You Need an Expert Electrician for Your Business’s Electrical Upgrades and Repairs

When it comes to maintaining and upgrading your business’s electrical systems, it’s essential to call in a professional. Electrical work in any commercial setting requires the ex...

Why Is It Crucial to Have a Building Inspection Done Before Buying a New Home?

Purchasing a new property is a big financial decision that can impact your future for years. Whether you are a first-time buyer or an investor, good or bad, it is essential to en...

Online Application for Sick Leave Certificate: Understanding When and How to Secure One

A sick leave certificate is an official document issued by a healthcare professional to verify an individual's inability to attend work due to illness. It typically includes the ...

A No-Fuss Guide to an Effective Beauty Routine

Taking care of the skin and appearance need not be complicated; it need not even consume your hours of time. Smart and simple approaches can give one that glow and fresh look witho...

Safe & Effective Tattoo Removal in Auckland – What You Need to Know

If you're looking for tattoo removal in Auckland, modern laser technology offers the safest and most effective way to fade or completely remove unwanted ink. Whether it's an outd...

Fleece-Lined Tights vs. Regular Tights: What’s the Difference?

When temperatures drop, choosing the right pair of tights can make a significant difference in comfort, warmth, and durability. Whether you wear tights for fashion, work, or outdoo...

Times Magazine

The Ultimate Guide to Apple Watch Faces & Trending Wallpapers

In today’s digital world, personalization is everything. Your smartwatch isn’t just a timepiece—it’s an extension of your style. Thanks to innovative third-party developers, customizing your Apple Watch has reached new heights with stunning designs...

The Power of Digital Signage in Modern Marketing

In a fast-paced digital world, businesses must find innovative ways to capture consumer attention. Digital signage has emerged as a powerful solution, offering dynamic and engaging content that attracts and retains customers. From retail stores to ...

Why Cloud Computing Is the Future of IT Infrastructure for Enterprises

Globally, cloud computing is changing the way business organizations manage their IT infrastructure. It offers cheap, flexible and scalable solutions. Cloud technologies are applied in organizations to facilitate procedures and optimize operation...

First Nations Writers Festival

The First Nations Writers Festival (FNWF) is back for its highly anticipated 2025 edition, continuing its mission to celebrate the voices, cultures and traditions of First Nations communities through literature, art and storytelling. Set to take ...

Improving Website Performance with a Cloud VPS

Websites represent the new mantra of success. One slow website may make escape for visitors along with income too. Therefore it's an extra offer to businesses seeking better performance with more scalability and, thus represents an added attracti...

Why You Should Choose Digital Printing for Your Next Project

In the rapidly evolving world of print media, digital printing has emerged as a cornerstone technology that revolutionises how businesses and creative professionals produce printed materials. Offering unparalleled flexibility, speed, and quality, d...

LayBy Shopping