threatintel
actor tracker
IOC pivot
ioc · domain

athaliaoriginals[.]com

RU · RussiaDarkSideconfidence · high

DarkSide command-and-control domain documented in Mandiant's May 11, 2021 report on the DARKSIDE ransomware-as-a-service operation, contemporaneous with the Colonial Pipeline incident addressed in joint CISA/FBI advisory AA21-131A.

family
DarkSide
first seen
May 10, 2021
publisher
Mandiant
source citation