3 ms·
> It is unclear what incentive they would have to continue hacking public companies if they cannot profit from that. The intent would be to put pressure on nat
by GalenErso 4y ago
> It is unclear what incentive they would have to continue hacking public companies if they cannot profit from that.
The intent would be to put pressure on national legislatures to repeal laws that make paying ransoms illegal. Smart ransomware groups don't care about targets that can't afford to pay. So any "inability" to pay is either the result of stubbornness or a law, both of which can change if enough pressure is applied. Of course, the solution is for businesses to harden their systems enough to resist these sorts of intrusion in the first place.
- bluGill 4y agoNote too that the threat of the law may be enough motivation to stop payment. Insurance in particular is already starting to look at how hardened your IT systems are as part of your coverage.
- vuln 4y agoCompany pays Cyber Insurance which contracts 3rd party in Panama/SA/Israel to pay the ransom and report back the decryption key. Completely legal.