4 ms·
Having read the release by the attacker, my initial thought is that the immediacy of paying was probably due to the threat of the release of sensitive data, not
by Ancapistani 5y ago
Having read the release by the attacker, my initial thought is that the immediacy of paying was probably due to the threat of the release of sensitive data, not the ability to restore operations.
I’m sitting here wondering what exactly about the release of their financials and internal procedures prompted them to immediately pay $4-5m in the hopes of preventing it from happening?
- Mountain_Skies 5y agoJust spit balling here but they have had several other pipeline shutdowns in recent years. One was blamed on a third party damaging the pipeline but I believe the others were operational issues. Perhaps there's more information on those issues than the company would like the public to know? Just a wild guess.
- jussij 5y agoIf this is the case, then paying the ransom will turn out to be a stupid idea. If the threat was to release sensitive information, surely the firm would be asking the attackers for details of the sensitive information they claim to have. If the attackers come back with nothing then it was just a bluff. However if the attackers come back with real information then paying the ransom is just stupid, as the attacker still have the sensitive information and can repeat the payment demands ad infinitum.