4 ms·
> And one of the victim company's requirements will be that if I pay, then you agree to leave me alone. I'm curious how one would enforce that. From the fact t
by mumblemumble 5y ago
> And one of the victim company's requirements will be that if I pay, then you agree to leave me alone.
I'm curious how one would enforce that. From the fact that the ransom got paid in the first place, we can establish that there's no legal body that's able and willing to exercise any authority over the ransomware group. So it's not like you can sue them for breach of contract.
Perhaps you can rely on the honor system? Though, given this is a group of professional extortionists we're talking about, if you choose to go that route, you may be at elevated risk of getting what you deserve.
- perlgeek 5y agoIt's a matter of reputation. If a ransomware group has a reputation of not actually delivering the unlock upon payment, or of re-infection shortly afterwards, the decision to pay them becomes harder to defend.
- mumblemumble 5y agoA sticky problem indeed. I'm sure their sock puppet budgets must run into the tens of dollars.
- tyingq 5y agoI don't know that you can even reliably identify what ransomware group you're dealing with. They seem to use similar software, wallet addresses can change, people can claim to be some group they aren't, etc. And they probably identify potential victims with similar methods and tools.
- Blikkentrekker 5y agoHow would the statistics then be gathered that half were hit by the same?