3 ms·

How can these ransomware actors hide for so long? Is this all dependent on Bitcoin laundering?

• tough 3y ago
  if you're a government sanctioned NK actor you don't have to really hide you go to work to your govt office like it's tuesday and that's it
• deleted 3y ago
  [deleted]
• tux3 3y ago
  Ransomware groups play a game of attacking the most valuable targets they can, without attracting so much attention that three letter friends start having meetings about them. Crypto is a necessary component. And then many ransomware implants will also refuse to run on systems with RUS locale, for instance. The understanding seems to be that groups can avoid attention of local law enforcement as long as they do not make any waves locally.