Darkside
From extortion.wiki, the ransomware notes archive
1 archived note associated with the upstream family directory darkside. The family label follows ThreatLabz; any link to negotiation records uses an explicit archive alias mapping.
Archived note files
1 supported · 0 skipped| Original filename | File type | Content hash | Source | Internal archive |
|---|---|---|---|---|
| darkside.txt | Plain text (.txt) | 389e2d890693a76a… | Upstream file | Read archived source |
Negotiation records
Threat actor page: DarksideAn explicit archive alias maps the ThreatLabz family Darkside to the Ransomchats actor label Darkside. Note and negotiation counts remain separate.
Canonical lineage: DarkSide. View aliases, timeline, evidence, and confidence notes.
| Participants | Source | Archive status | |||
|---|---|---|---|---|---|
| You must pay $ 10000000 220.02 BTC (+20%) or 23879.46 XMR | 10 | Darkside | JSON | Indexed | |
| You must pay $ 250000 5.51 BTC (+20%) or 603.89 XMR | 63 | Darkside, Victim | JSON | Indexed | |
| 20210215 | 24 | Darkside, Victim | JSON | Indexed | |
| 20201115 | 243 | Darkside, Victim | JSON | Indexed | |
| You need pay $ 2,000,000 190.363 BTC (+10%) or 22537.751 XMR | 85 | Darkside, Victim | JSON | Indexed |
Dataset provenance and citation
| Upstream collector | Zscaler ThreatLabz |
|---|---|
| Source repository | ThreatLabz/ransomware_notes |
| Source directory | darkside |
| Snapshot commit | 2bbf5b4ecda84837c4a71af1a99c6821920f051a |
| Dataset snapshot | Jun 26, 2026, 10:27 PM |
| Synchronization time | Jul 22, 2026, 11:47 AM |
| Source status | Complete |
| License | MIT; preserved notice |
| Stable internal citation | extortion.wiki. Darkside ransomware notes. ThreatLabz/ransomware_notes snapshot 2bbf5b4ecda84837c4a71af1a99c6821920f051a. https://extortion.wiki/notes/darkside/. |