Hello, welcome to the Tuesday, June 22nd, 2021 edition of the Sandsenert Storm Center Stormcast.

My name is Johannes Ulrich.

And today I'm recording from Jacksonville, Florida.

Today on Tuesday at 10 a.m. Jason Lamb and I will be essentially repeating a talk

that we gave at RSA, but the little bit

an updated version, of course, by now dealing with distributed web applications and

some of the security threats to them.

The talk will be sort of a little bit defending attack format where I'll be the defender

and Jason will be

the attacker's link will be included in the show notes.

After its attack against a colonial pipeline, the Darkside Ransomware Gang, of course,

made news big time also talked about disbanding itself, but at the same time, impersonators

of DarkSight are now springing up according to some reports, emailing to companies' ransom

notes, of course, without backing them up with the actual ransomware. Remember, DarkSight did encrypt the data and at the same time also threatened the release

of the data.

Of course, the release of the data is for some companies as critical as not having the data

accessible anymore.

So these impersonators, they're skipping straight to threatening the release of leaked data

without actually encrypting any data.

That's probably here the giveaway that you are dealing with an imposter.

If you still have access to all of your data, nothing is encrypted,

and you're getting an email claiming that the DarkSight ransomware gang did breach your network. Don't lose too much

...