SiberiaProg is not a company. It is not a hacker group. It is an idea: that in the relentless heat of modern data, the only way to preserve something forever is to freeze it solid and bury it deep where no one thinks to look. And in the vast, silent tundra of cyberspace, that idea remains very much alive.
It was absurd. It was brilliant. It was pure SiberiaProg. siberiaprog
It was a data-wiping tool. But unlike the noisy, destructive viruses of the era, this one was surgical. It didn't delete files; it encrypted them with a timestamp-based key that would only unlock after a specific date—sometimes years in the future. The user called it “cryogenic storage for secrets.” SiberiaProg is not a company
What shocked investigators wasn't the ransom—it was the method. The malware had spread not through phishing or zero-days, but through a flaw in the company’s heating system’s control unit , which had been connected to the corporate LAN. The attackers had identified a thermal overrun vulnerability, causing the HVAC system to cycle erratically, which in turn triggered a firmware glitch in the network switches. And in the vast, silent tundra of cyberspace,
No one paid. The company restored from backups six weeks later. But on January 15, 2025—exactly ten years after the infection—the decryption keys spontaneously appeared on a public pastebin, and every locked file unlocked simultaneously. The message attached read: “We keep our word. Even the cold ones.” Who is SiberiaProg today? Speculation runs rampant. Some say Nikolai V. died in a climbing accident in the Altai Mountains in 2018. Others claim the collective was absorbed by a state actor—either the GRU or the FSB, given their operational brilliance. A few romanticists insist they remain independent, living off bounties and selling bespoke “cryo-kits” to journalists and dissidents.
A major Russian oil and gas conglomerate, Sibneft-Yugra, suffered a complete network paralysis. Every workstation displayed the same frozen screen: a stark white landscape with a single, flickering green line—the aurora borealis visualized as a progress bar. The ransom note was brief: “Your data is not deleted. It is in cryo. Pay 5,000 Bitcoin to the thaw address, or wait until 2025 for automatic decryption.”
