Colonial Hackers Shut Down Service Amid Pressure From U.S.

The group suspected of being behind the massive Colonial Pipeline Co. attack has told other hackers that it plans to shut down its ransomware-as-a-service operation amid pressure from law enforcement.

The group DarkSide told its affiliates -- hackers who buy the group’s malware -- in a Thursday announcement that it had lost access to some infrastructure, including a blog and payment servers, according to Kimberly Goody, senior manager of financial criminal analysis at FireEye Inc.’s Mandiant. The group planned to close down and provide decrypters to companies that haven’t paid the ransom, she said.