Everest ransomware group’s darknet site offline following defacement

Summary: The darknet leak site used by the ransomware group Everest was taken offline and defaced with an anti-crime message. The incident raises questions about its legitimacy and potential involvement of law enforcement, as authorities intensify disruption operations against ransomware activities. In the wake of recent disruptions, including operations against other ransomware groups, there is a noticeable decline in extortion payments in the cybercrime ecosystem.

Affected: Everest ransomware group

Keypoints :

• The Everest darknet site was hacked and defaced with a message criticizing crime.
• Law enforcement disruption operations are increasingly targeting ransomware groups.
• The UK government is considering banning extortion payments by public sector bodies.
• Extortion payments have dropped for the first time in several years, per Chainalysis.