A criminal group originating from Russia named "DarkSide" is believed to be responsible for a ransomware cyberattack on the Colonial Pipeline, according to a former senior cyber official.
source https://www.cnn.com/2021/05/09/politics/colonial-pipeline-cyberattack-restart-plan/index.html