6 ms·

They're not using cryptography, but aren't they demanding ransom? Is the use of cryptography an essential part of what it means for something to be ransomware,

They're not using cryptography, but aren't they demanding ransom? Is the use of cryptography an essential part of what it means for something to be ransomware, or is it merely a common implementation detail?

derivagral 6y ago
To me, ransomware attacks are specifically "the malware got in and turned all my data to mush; the attacker doesn't care about my data, just that I'll pay to un-mush it." This is "the malware got in and sent copies back home; now home base is threatening release and expecting payment to prevent it." To me, this is blackmail done via hacking, not ransomware.
- Godel_unicode 6y ago
  Fwiw, many actors doing the former are also doing the latter. If someone paid you once to unencrypt, presumably they'll pay you again to not disclose the data. The line between those two business models is pretty blurry.
flyGuyOnTheSly 6y ago
They are demanding a ransom, but Ransomware has a commonly accepted definition which requires encrypting files and demanding payment to decrypt them. [0] [0] https://en.wikipedia.org/wiki/Ransomware https://en.wikipedia.org/wiki/Ransomware
- zimpenfish 6y ago
  The very first sentence of that link would include this under "ransomware" > Ransomware is a type of malware from cryptovirology that threatens to publish the victim's data or perpetually block access to it unless a ransom is paid. (added emphasis)
  - flyGuyOnTheSly 6y ago
    That's a single sentence pulled from a very long definition, though. Here's the third sentence from that very same paragraph: >It encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them. Not everything can be explained in a single sentence.
- tompazourek 6y ago
  They are not demanding ransom. Ransom is (per Merriam Webster): "a consideration paid or demanded for the release of someone or something from captivity". They copied the data, and they want money otherwise they will release it. It's ordinary blackmail.
  - bigbubba 6y ago
    Perhaps you could say they are ransoming the exclusive ownership of the data. But yes, 'blackmail' seems like a better fit.
curryst 6y ago
> They're not using cryptography, but aren't they demanding ransom? No, a ransom is a fee paid for the release of something you value. Cryptography is one way to take a user's data, and release it back to them on payment. This is blackmail. They want payment to not release something.
heavyset_go 6y ago
It's blackmail.
- ajay-b 6y ago
  Against whom? Where is the profit mechanism? Are the hackers really prepared to track down every patient and try to blackmail them? It’s like the emails you get some times from hackers that have an old password of yours and threaten to release that video of you pleasuring yourself. Seriously?
  - heavyset_go 6y ago
    Against the firm that let their patients' private data leak. Medical groups tend to have deep pockets.

derivagral 6y ago

To me, ransomware attacks are specifically "the malware got in and turned all my data to mush; the attacker doesn't care about my data, just that I'll pay to un-mush it." This is "the malware got in and sent copies back home; now home base is threatening release and expecting payment to prevent it." To me, this is blackmail done via hacking, not ransomware.

Godel_unicode 6y ago
Fwiw, many actors doing the former are also doing the latter. If someone paid you once to unencrypt, presumably they'll pay you again to not disclose the data. The line between those two business models is pretty blurry.

flyGuyOnTheSly 6y ago

They are demanding a ransom, but Ransomware has a commonly accepted definition which requires encrypting files and demanding payment to decrypt them. [0] [0] https://en.wikipedia.org/wiki/Ransomware https://en.wikipedia.org/wiki/Ransomware

zimpenfish 6y ago
The very first sentence of that link would include this under "ransomware" > Ransomware is a type of malware from cryptovirology that threatens to publish the victim's data or perpetually block access to it unless a ransom is paid. (added emphasis)
- flyGuyOnTheSly 6y ago
  That's a single sentence pulled from a very long definition, though. Here's the third sentence from that very same paragraph: >It encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them. Not everything can be explained in a single sentence.
tompazourek 6y ago
They are not demanding ransom. Ransom is (per Merriam Webster): "a consideration paid or demanded for the release of someone or something from captivity". They copied the data, and they want money otherwise they will release it. It's ordinary blackmail.
- bigbubba 6y ago
  Perhaps you could say they are ransoming the exclusive ownership of the data. But yes, 'blackmail' seems like a better fit.

curryst 6y ago

> They're not using cryptography, but aren't they demanding ransom? No, a ransom is a fee paid for the release of something you value. Cryptography is one way to take a user's data, and release it back to them on payment. This is blackmail. They want payment to not release something.

heavyset_go 6y ago

It's blackmail.

ajay-b 6y ago
Against whom? Where is the profit mechanism? Are the hackers really prepared to track down every patient and try to blackmail them? It’s like the emails you get some times from hackers that have an old password of yours and threaten to release that video of you pleasuring yourself. Seriously?
- heavyset_go 6y ago
  Against the firm that let their patients' private data leak. Medical groups tend to have deep pockets.