XSS, one of the most popular Russian-language hacking forums, has banned all topics promoting ransomware, to prevent “unwanted attention.” XSS is a Russian-language hacking forum created to share knowledge about exploits, vulnerabilities, malware, and network intrusion.
With the rise of ransomware, Ransomware-as-a-Service (RaaS) gangs – such as REvil, LockBit, DarkSide, Netwalker and Nefilim – are increasingly using the forum in question to “recruit” new partners/allies to their business.
Read also: DarkSide ransomware: After Colonial Pipeline, it targets three more companies
After the DarkSide ransomware gang encrypted Colonial Pipeline (the company that manages the largest U.S. fuel pipeline) and disrupted the pipeline's operations, law enforcement and security researchers are increasingly investigating both the gang and sites that promote the ransomware.
In a post on the forum — which was discovered by Yelisey Boguslavskiy, a security researcher at Advanced Intel — the owner of the XSS, known as “Administrator,” said on May 13 that forum topics promoting ransomware are no longer allowed on the site. Specifically, the post states that all “Ransomware affiliate programs,” “Ransomware rental,” and “selling lockers (ransomware software)” are prohibited, and that existing topics will be deleted.
See also: FBI and CISA issued an alert about DarkSide ransomware
The reason for this ban is that the owner believes that the ransomware is "drawing" unwanted attention to the site and "has become dangerous and toxic.".
This ban displeased ransomware gangs.
Shortly after the publication of the topics, representatives of the gangs using the REvil ransomware expressed their displeasure with this decision.
With key members of the ransomware gang keeping a low profile, law enforcement is targeting its associates in order to weaken the "business" or force it to "shut down.".
Suggestion: Ransomware gangs have leaked data from over 2,100 companies so far!
As more and more hacking communities make ransomware operations undesirable, it will be more difficult for RaaS companies to recruit new partners/allies and promote their activities.
Information source: bleepingcomputer.com
