2 ms·
Why? Some ransomware gangs put great value in their reputation, as this isn't a one-time game for them. This is only becoming more so these days as the level of
by dmurray 5y ago
Why? Some ransomware gangs put great value in their reputation, as this isn't a one-time game for them. This is only becoming more so these days as the level of professionalism increases.
You might as well ask why the group would bother providing the decryption key once the ransom is paid. It's a little trickier here - do you want to be in a position to call them out publicly afterwards if you were complicit in sabotaging your employer? - but the criminals arguably have more to lose.
- kortilla 5y agoBecause a ransomware gang screwing a victim is public. Screwing a criminal that would implicate themselves by complaining is not.
- perl4ever 5y agoThe idea that the criminals need to maintain a reputation doesn't make sense to me. Every negotiation is about the best alternative each party has to an agreement. If someone has a plausible alternative to a ransom, like restoring from backups, they will take it, regardless of the reputation of the adversary. If someone doesn't have a plausible alternative to a ransom, then they might as well pay it even if the chance is infinitesimal. Since in either case, the behavior of the victim is unrelated to the level of trust they have in the criminal gang, there is no incentive to be "professional" and trustworthy. This might not apply if the gang actually is tied to a nation state and/or has political motives. But if they are purely profit maximizing entities, then they should not be expected to concern themselves with a reputation for keeping their word. Somehow people forget that the victims don't choose who they are victimized by.