Security News > 2021 > November > BlackMatter ransomware gang says it's disbanding – again – after Ukraine arrests
A member of the BlackMatter ransomware gang has publicly claimed the extortionists are shutting down, causing much excitement within the infosec world.
A Russian-language message reportedly posted on a forum used by ransomware criminals is said to have announced BlackMatter's second disappearance of 2021, the gang previously pulling a disappearing act under their former name of Darkside.
BlackMatter ransomware group has announced they're shutting down operations following pressure from local authorities - they state key members are no longer 'available'.
BlackMatter RaaS announcement of operations shutting down.
Pascal Geenens, director of threat intelligence at TI firm Radware, opined: "I would not be surprised if they go on to rebrand. BlackMatter is already a rebrand of DarkSide. They too shut down after the Colonial Pipeline attack as they felt the pressure of law enforcement."
Earlier this week police forces in Ukraine and Switzerland swooped on ransomware suspects, arresting 12 in what police coordination bureau Europol described as an "Action day." While most informed analysis places ransomware criminals in Russia, in recent months Ukraine has seen the arrests of numerous suspects.