The Times gained access to the internal « dashboard » that DarkSide customers used to organize and carry out ransom attacks. The login information was provided by a cybercriminal through an intermediary. Access to the #DarkSide dashboard offered an extraordinary glimpse into the internal workings of a Russian-speaking gang that has become the face of global cybercrime. Cast in stark black and white, the dashboard gave users access to DarkSide's list of targets as well as a running ticker of profits and a connection to the group's customer support staff, with whom affiliates could craft strategies for squeezing their victims. The dashboard was still operational as of May 20, 2021 when a Times reporter logged in, even though DarkSide had released a statement a week earlier saying it was shutting down. According to the cybersecurity firm Elliptic, which has studied DarkSide's Bitcoin wallets, the gang has received about $15.5 million in Bitcoin since October 2020, with another $75 million going to affiliates.

https://www.nytimes.com/2021/05/29/world/europe/ransomware-russia-darkside.html