Siberiaprog <FAST>

No one paid. The company restored from backups six weeks later. But on January 15, 2025—exactly ten years after the infection—the decryption keys spontaneously appeared on a public pastebin, and every locked file unlocked simultaneously. The message attached read: “We keep our word. Even the cold ones.” Who is SiberiaProg today? Speculation runs rampant. Some say Nikolai V. died in a climbing accident in the Altai Mountains in 2018. Others claim the collective was absorbed by a state actor—either the GRU or the FSB, given their operational brilliance. A few romanticists insist they remain independent, living off bounties and selling bespoke “cryo-kits” to journalists and dissidents.

What shocked investigators wasn't the ransom—it was the method. The malware had spread not through phishing or zero-days, but through a flaw in the company’s heating system’s control unit , which had been connected to the corporate LAN. The attackers had identified a thermal overrun vulnerability, causing the HVAC system to cycle erratically, which in turn triggered a firmware glitch in the network switches. siberiaprog

But to this day, every few winters, a new tool will appear on an obscure Tor onion site. It will be signed with a cryptographic key dating back to 2009. It will have no documentation, no support forum, and no explanation. It will simply work —cold, efficient, and utterly indifferent to the panic it causes in boardrooms from Houston to Hong Kong. No one paid

In the sprawling digital underground, where code is currency and anonymity is armor, few names carry the chilling weight of SiberiaProg . To the outside world, it sounds like a piece of forgotten Russian middleware or a weather monitoring system. To those in the know, it is a legend—a phantom software collective that emerged from the frozen expanse of eastern Russia, leaving a trail of brilliant, dangerous, and utterly unorthodox code. Chapter 1: The Thaw of '09 The story begins not in a gleaming Moscow tech hub, but in a cramped, overheated khrushchevka apartment in Novosibirsk, the de facto capital of Siberia. The year is 2009. A forum post appears on a darknet bulletin board, signed only with the handle SiberiaProg . The post contained no manifesto, no grand promises. Just a single file: permafrost_keeper_v0.1.exe . The message attached read: “We keep our word