4 ms·
Do hacker groups have positive track records of not sharing their stolen data? It’s ironic to pay and then rely on trusting them.
by reiderrider 6y ago
Do hacker groups have positive track records of not sharing their stolen data? It’s ironic to pay and then rely on trusting them.
- Miner49er 6y agoYes, otherwise people would stop paying them. However, I wouldn't be surprised if once they make enough money, they do a type of exit scam: sell anything they can, then leave the business. It happens often in dark net markets.
- ryanlol 6y agoMost stolen data is very hard to sell for meaningful amounts. Such an “exit scam” would be a waste of time, you’d make more money by just ransoming one more company. When you’re earning (tens of) millions by extorting companies you aren’t going to be very interested in selling their data for tens or hundreds of thousands.
- Miner49er 6y agoTrue, it's probably not worth the time unless they've stolen some very valuable data. Obviously things like plastic surgery pics wouldn't be worth much of anything.
- LinuxBender 6y agoException would likely be pictures of celebrities. Their managers would not want those being distributed and would sue whoever they could.
- ryanlol 6y agoAgain, that’s only good for extortion. Only worth tens of thousands if you’re going to sell them.
- LinuxBender 6y agoAgreed. Otherwise they would just be dumped on the web or put behind paywalls of dodgy sites.
- washadjeffmad 6y agoDepends on the clients. I remember a case where a family that hid their daughter's cosmetic surgeries had the marriage annulled when it was discovered by the groom's much wealthier family. So a lucrative target might be someone who traveled from outside the US to have work done to hide it, especially if they were relatively young.
- ryanlol 6y agoIt’s always possible to come up with an extremely unlikely scenario where the data would he be extraordinarily valuable, but nobody is going to bet hundreds of thousands (or millions, to actually make it worth it for the ransomware gang) to buy the data.
- wolco2 6y agoYes even if you don't pay because unless revenge is part of the target attacking you they just wastes time with no gain.