Share this article on:
The prolific ALPHV ransomware gang has had its site taken down for days, with the main suspect for the outage being law enforcement.
The group, which also goes by BlackCat, had its leak site taken down late last week (7 December), preventing parties seeking to access stolen data or listings from doing so.
At the time of writing, Cyber Daily has observed that the site is still down, despite the group having said earlier that it should be up soon.
ALPHV’s server admin’s Tox Status hints that repairs are underway, but no details on how the site was taken down or how long it is expected to be down have been revealed.
While a culprit for the outage has yet to be formally identified, the main suspect is believed to be a law enforcement agency, more specifically, the FBI.
A number of cyber experts have expressed their beliefs regarding the FBI’s responsibility on social media.
One group called RedSense Intelligence published a post on X (formerly Twitter) saying it was able to confirm that law enforcement was responsible for the outage.
Today, RedSense can confirm that #ALPHV aka #BlackCat ransomware gang’s site has been taken down by law enforcement @4D435A pic.twitter.com/ydx5irW86N
— RedSense (@RedSenseIntel) December 8, 2023
While there is currently no concrete evidence to suggest that law enforcement is behind ALPHV’s site going down, prior law enforcement operations have resulted in similar outages, such as the FBI attacks on REvil and Hive.
The ALPHV ransomware gang is one of the largest and most active ransomware groups, having been responsible for some of the largest cyber attacks in recent history, including the attack on Australian law firm HWL Ebsworth that led to breaches of a number of government agencies, the big four banks and more.
It was also responsible for the MOVEit hack, which racked up a similarly large list of high-profile victims, including US government agencies.