DD4BC group started its malicious activity in late 2014. It is responsible for multiple extortion attacks aiming many different companies across all countries and industries. Akamai’s CSIRT (Customer Security Incident Response Team) provides a detailed insight about this organization and how they operate, based on the collection of public information and also on anonymized data of Akamai customers. The taxonomy and methodology of the extortion attacks are revealed. As well, the CSIRT team proposes mechanisms to defend against DD4BC.