{"id":3649,"date":"2021-05-09T21:23:00","date_gmt":"2021-05-09T19:23:00","guid":{"rendered":"https:\/\/security.sauer.ninja\/?p=3649"},"modified":"2022-11-02T21:23:59","modified_gmt":"2022-11-02T19:23:59","slug":"ddos-ransom-e-mail-black-shadow-group","status":"publish","type":"post","link":"https:\/\/security.sauer.ninja\/en\/it-security\/ddos-ransom-e-mail-black-shadow-group\/","title":{"rendered":"DDoS Ransom E-Mail: black shadow group"},"content":{"rendered":"\n<p>A blackmail e-mail from the black shadow group has just arrived at a customer:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>FORWARD THIS MAIL TO WHOEVER IS IMPORTANT IN YOUR COMPANY AND CAN MAKE DECISION!<br>We are the BLACK SHADOW hacker group.<br>Your network will be DDoS-ed starting 12:00 UTC+1 on 08 May 2021 if you don\u2019t pay protection fee \u2013 10 Bitcoins @ 1FfmbHfnpbZjKFvyi1okTjJJusN455paPH<br>If you don\u2019t pay by 12:00 UTC on 08 May 2021, attack will start, your service will go down permanently. Price to stop will increase up 5 BTC for every day of attack.<br>This is not a joke. We are the&nbsp;<a href=\"https:\/\/black-shadow.ninja\/\">BLACK SHADOW<\/a>&nbsp;liberty hackers.<br>Our attacks are extremely powerful \u2013 sometimes over 1,3 Tbps per second. And we pass CloudFlare, Link11 and others DDoS protections! So, neither cheap or expensive protection will help.<br>Try to reply, we will not read. Pay and we will know its you.<\/p><cite>Mail black-shadow@protonmail.com<\/cite><\/blockquote>\n\n\n\n<p>In fact, about 200GBits ingoing traffic on the uplink. Mainly UDP traffic. We had to blackhole the attacked IP addresses from the network and put new IPs on the services. Everything was back online in an hour when the traffic in DeCIX was thrown away by their routers due to the null route. Fortunately, the attacker did not react to our evasion technique.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A blackmail e-mail from the black shadow group has just arrived at a customer: FORWARD THIS MAIL TO WHOEVER IS IMPORTANT IN YOUR COMPANY AND CAN MAKE DECISION!We are the BLACK SHADOW hacker group.Your network will be DDoS-ed starting 12:00 UTC+1 on 08 May 2021 if you don\u2019t pay protection fee \u2013 10 Bitcoins @ &#8230; <span class=\"more\"><a class=\"more-link\" href=\"https:\/\/security.sauer.ninja\/en\/it-security\/ddos-ransom-e-mail-black-shadow-group\/\">[Read more&#8230;]<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","footnotes":""},"categories":[213],"tags":[],"class_list":{"0":"entry","1":"post","2":"publish","3":"author-psauer","4":"post-3649","6":"format-standard","7":"category-it-security"},"_links":{"self":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts\/3649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/comments?post=3649"}],"version-history":[{"count":2,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts\/3649\/revisions"}],"predecessor-version":[{"id":3651,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/posts\/3649\/revisions\/3651"}],"wp:attachment":[{"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/media?parent=3649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/categories?post=3649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/security.sauer.ninja\/en\/wp-json\/wp\/v2\/tags?post=3649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}