5 ms·
Didn't a ransomware gang just renege on a deal and release the data anyway. Seems like they are killing their own business model. If company X cannot depend on
by strangattractor 3y ago
Didn't a ransomware gang just renege on a deal and release the data anyway. Seems like they are killing their own business model. If company X cannot depend on the gang delivering why pay in the first place. Boeing will have to pay for any fallout form the data breach - why have the added expense of paying the criminals for the privilege?
- barryrandall 3y agoThey do that all the time. The first ransom is to get the decryption keys to the target's data, the second ransom is to prevent them from publishing the decrypted data.
- CivBase 3y agoIf they're going to publish the data publicly, what do you need decryption keys for? Seems like it's basically an all-or-nothing deal to me.
- contravariant 3y agoI think that's why you ransom the decryption key first. If I understood correctly.
- deleted 3y ago[deleted]
- bretpiatt 3y agoPerspective as CEO of a backup and disaster recovery company... A lot of folks now have ransomware protected backups for critical data so they aren't paying for decryption keys. This has escalated to hack and release, the attackers are now exfiltrating data and threatening to make it public in addition to encrypting it on the host system.
- sandworm101 3y ago>> If they're going to publish the data publivally, what do you need decryption keys for? Because they will publish the bad stuff, the stuff you really don't want public, but likely withhold the boring stuff, the stuff the business really needs to function. And whatever they release might not be in the format that it was taken.
- barryrandall 3y agoThey only tell you about the second extortion attempt after the success of the first. As I understand it, each gang operates differently, but most are consistent in their approach (e.g. x will always double ransom, but y will never).
- asdfman123 3y agoTragedy of the commons. We need to establish a centralized judicial system to identify and shut down bad ransomware actors.
- op00to 3y agolet's hold off on advocating for a New World Order just yet.
- asdfman123 3y agoNo, this would be a shadow government by ransomware companies to govern other ransomware companies. We can all get along!
- xeckr 3y agoThis opens up an interesting (albeit highly unethical and illegal) strategy to combat ransomware, which could be implemented by state actors: 1. hack targets and hold their data for ransom 2. get the ransom and release the data anyway This would largely discredit the actual ransomware gangs. A way to make this more ethical would be to have the data be insignificant or encrypted. The media will still have their story, and public perception will be changed. An even better way would be to secretly coordinate with the "targets" of the hacks, turning the whole thing into a harmless spectacle that nevertheless decreases the incentive to hold data for ransom.