DarkSide: The New Ransomware Group Behind Highly Targeted Attacks

### Executive summary: This report analyzes the DarkSide ransomware operation—presented as a Ransomware-as-a-Corporation (RaaC)—describing its targeted victim selection, customized ransomware executables, use of PowerShell and shadow copy deletion, data exfiltration to a leak site for extortion, professionalized communications (press releases), and provides IoCs and MITRE ATT&CK technique mappings to aid detection and response.