
Someone Hacked Ransomware Gang Everest’s Leak Site
A leak site used by the notorious Everest ransomware gang was hacked and defaced over the weekend, TechCrunch has learned. The site, which is utilized by the criminal organization to publish stolen files and extort victims into paying a hefty ransom demand, was replaced with a brief text note: “Don’t do crime CRIME IS BAD xoxo from Prague.”
At the time of writing, the site remained defaced. It is unclear whether the gang also suffered a data breach as a result of the hack.
Everest is a highly active Russia-language ransomware gang that has claimed responsibility for multiple hacks and data breaches since its inception in 2020. The group’s exploits have targeted numerous organizations, including cannabis retail chain Stiizy, which saw over 420,000 customer records compromised in the attack.
In addition to private sector targets, Everest has also been linked to high-profile government agencies, with the U.S. government attributing several hacks to the gang, including incidents at NASA and the Brazilian government.
Ransomware attacks have become increasingly common in recent years, but a recent report suggests that the number of victim payments to hackers has decreased as more businesses refuse to pay out hefty ransoms. Despite this trend, law enforcement agencies continue to target and disrupt ransomware gangs, having successfully taken down groups like LockBit and Radar.
Despite the successes, some ransomware gangs have also experienced damaging leaks and sabotage from within their own ranks, highlighting the ongoing cat-and-mouse game between cybercriminals and authorities.
The incident serves as a stark reminder of the ever-evolving nature of cybersecurity threats and the need for constant vigilance in the face of such attacks.
Source: https://techcrunch.com/2025/04/07/someone-hacked-everest-ransomware-gang-dark-web-leak-site/