Justice Dept. says it recovered most of the ransom paid after the Colonial Pipeline cyber attack.

… to the Russian hacking group DarkSide after it used ransomware, a form of malicious software, to hold up the company’s business networks in May.
read source