The FBI says a group called DarkSide was behind the ransomware attack that forced Colonial Pipeline to shut down operations last week. DarkSide is believed to have roots in Eastern Europe, possibly Russia, and is fairly new. But like a lot of these ransomware groups, it’s pretty PR-savvy. It’s got a mailing list, press releases and a hotline for victims. Marketplace’s Amy Scott speaks with Brian Krebs, an investigative journalist for Krebs on Security. He wrote a story this week walking through a DarkSide negotiation with another recent victim who wanted reassurance that if they pay the ransom, the hackers will actually give them their data back and won’t sell it or share it with anyone. During the exchange the hacker says, basically: Ask around.

Support from listeners is what powers our journalism. Your gift today goes back into making the business and tech news you love. Donate now: marketplace.org/givetech