Sign up for our daily briefing

Make your busy days simpler with Axios AM/PM. Catch up on what's new and why it matters in just 5 minutes.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Catch up on the day's biggest business stories

Subscribe to Axios Closer for insights into the day’s business news and trends and why they matter

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Stay on top of the latest market trends

Subscribe to Axios Markets for the latest market trends and economic insights. Sign up for free.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Sports news worthy of your time

Binge on the stats and stories that drive the sports world with Axios Sports. Sign up for free.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Tech news worthy of your time

Get our smart take on technology from the Valley and D.C. with Axios Login. Sign up for free.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Get the inside stories

Get an insider's guide to the new White House with Axios Sneak Peek. Sign up for free.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Denver news?

Get a daily digest of the most important stories affecting your hometown with Axios Denver

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Des Moines news?

Get a daily digest of the most important stories affecting your hometown with Axios Des Moines

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Twin Cities news?

Get a daily digest of the most important stories affecting your hometown with Axios Twin Cities

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Tampa Bay news?

Get a daily digest of the most important stories affecting your hometown with Axios Tampa Bay

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Want a daily digest of the top Charlotte news?

Get a daily digest of the most important stories affecting your hometown with Axios Charlotte

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Sign up for Axios NW Arkansas

Stay up-to-date on the most important and interesting stories affecting NW Arkansas, authored by local reporters

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Fuel tanks at Colonial Pipeline's Dorsey Junction Station on May 13 in Washington, D.C. Photo: Drew Angerer/Getty Images

The hacker group DarkSide, which was responsible for a ransomware attack that shut down the Colonial Pipeline and led to fuel shortages in multiple states this week, claims to be shutting down, Krebs on Security and several cybersecurity firms report.

Why it matters: In a message from a cybercrime forum, the group said it had lost access to the infrastructure needed to carry out its extortion operations and that a cryptocurrency account it uses to pay its affiliates had been drained.

What they're saying: “Servers were seized (country not named), money of advertisers and founders was transferred to an unknown account,” reads the message, which was reviewed by Krebs.

  • “A few hours ago, we lost access to the public part of our infrastructure," the message continues. “Also, a few hours after the withdrawal, funds from the payment server (ours and clients’) were withdrawn to an unknown address."
  • The group also claimed it released decryption tools to all companies it had attempted to extort, but had not yet been paid.

Between the lines: Security experts say cyber criminal groups often disband and return under different names, and it therefore can't be determined if the disruption to DarkSide's infrastructure is legitimate or permanent, according to the Wall Street Journal.

  • It is also unknown if the U.S. government had any role in the events that led to the group's closure.

The big picture: Colonial Pipeline reportedly paid hackers linked to DarkSide nearly $5 million in cryptocurrency after last week's ransomware attack to regain access to its computer systems.

  • President Biden announced Thursday that the Justice Department launched a new task force that will specifically prosecute ransomware hackers "to the full extent of the law."
  • Biden late Wednesday signed an executive order in an attempt to bolster the country's cybersecurity defenses following the cyberattack.

Go deeper

Colonial Pipeline reportedly paid hackers nearly $5 million in ransom

Photo: Logan Cyrus/AFP via Getty Images

Colonial Pipeline paid hackers linked to the DarkSide cybercrime group nearly $5 million in cryptocurrency after last week's ransomware attack, Bloomberg first reported and the New York Times confirmed.

Why it matters: The breach of the largest refined fuels pipeline in the U.S. triggered new concerns about the vulnerability of the country's increasingly digitized energy systems.

Biden warns gas stations not to price gouge: "That's not who we are"

Photo: Drew Angerer/Getty Images

President Biden on Thursday warned gas companies to not price gouge amid major shortages following the Colonial Pipeline cyberattack.

The big picture: Biden added that the FBI does not believe the Russian government is behind the attack, but they do know that those responsible "are living in Russia."

Colonial Pipeline restarting service after hack

Photo: Bloomberg via Getty Images

Colonial Pipeline is restarting operations around 5 p.m. ET Wednesday, Energy Secretary Jennifer Granholm announced.

Why it matters: At least 11 states and Washington, D.C., have experienced gas shortages since a ransomware attack forced the critical pipeline running from Texas to New York to shut down on Saturday.