3 ms·
If that became a big business model, then we might start getting meta-criminals: 1. They infect a major institution with ransomware. 2. They demand, and succe
by _Nat_ 6y ago
If that became a big business model, then we might start getting meta-criminals:
1. They infect a major institution with ransomware.
2. They demand, and successfully receive, a major ransom.
3. They DON'T immediately release the key, despite the ransom being paid. Instead, they issue an open demand for ransoms to be paid to a random Bitcoin address from other major ransomware groups.
4. The meta-ransomers only release the key to the original victim if they receive sufficient ransoms from other ransomers.
The meta-criminals would essentially be ransoming the credibility of ransomers. If the ransomers don't pay up, then the meta-ransomers will chip away at their credibility.
- jacquesm 6y agoYou've got a partner now.
- to11mtm 6y agoThat doesn't sound like it would work amazingly well. First thought is that the 'meta-ransomers' would probably only get one or two shots at such an action working before the major groups make some sort of statement (and even perhaps provide some sort of way to 'authenticate' that it an attack is from one of of the more 'trustworthy' ransomware groups.) Second thought is that it would have to be a gutsy group of rogue actors or group of rogue actors. A lot of these underground folks still know each other one way or another and this would probably be considered a big 'f--- you' to the rest of the community. Bridges would be burned, unspoken agreements in the sphere may be violated. You could even see the ransomers quickly turn their efforts to exposing the meta-ransomers. On the other hand, it could become an 'arms race' as the meta and non-meta ransomers start trying to shut each other's ransomware down
- jtsiskin 6y agoThis doesn’t work because a ransomware group could just sign their message. I wouldn’t be surprised if they do already