Coverage Advisory for DarkSide Ransomware

A cybersecurity advisory describes the DarkSide ransomware campaign responsible for the Colonial Pipeline compromise; it outlines DarkSide's distribution via weak or compromised VDI/RDP credentials, its RSA+SALSA20 encryption and randomized file extensions, its double-extortion data exfiltration tactic, the broad impact on Windows and Linux systems across multiple sectors, recommended mitigations (backups, patching, MFA, Zero Trust), and associated detection signatures and sandbox reporting by Zscaler.