Everest Ransomware Group Leak Site Hacked, Defaced

The leak site of the Everest ransomware gang was hacked and defaced over the weekend, displaying a message that read, 'Don't do crime CRIME IS BAD xoxo from Prague.' This incident highlights the vulnerabilities faced by even sophisticated cybercriminal organizations, with uncertainty surrounding whether the gang suffered a data breach. Everest, which has been active since 2020, is linked to significant attacks, including data breaches involving over 420,000 customers at cannabis retailer Stiizy, and has been connected to breaches at NASA and the Brazilian government. Despite an increase in ransomware attacks, the number of payments made to hackers dropped in 2024 as companies increasingly refuse to comply with ransom demands. Recent law enforcement efforts have targeted several ransomware groups, leading to a decrease in successful extortion payments. The identity of the hackers behind the defacement remains unknown, with speculation pointing to rival criminals, hacktivists, or investigative services.