News for hackers. Stuff that matters.

A comment on Garmin obtains decryption key after ransomware attack. Parent comment

Re:Garmin obtains decryption key after ransomware attack by mytailorisrich on Monday July 27, 2020 @05:08PM (#23969410)
I don't think that it is illegal to pay a ransom in general under US law. It is illegal to receive a ransom, though. As mentioned in the article, they are caveats related to terrorism and to dealing with entities on sanctions lists.

Now, if Garmin obtained the decryption keys, as is alleged in the article, it is clear that they paid. Note that the 'anonymous sources' cited did not even deny payment but only used a weasel turn of phrase 'did not directly make a payment', which is quite different from 'did not pay'. My best guess, if a payment was made, is that they hired people experts in dealing with these situations who arranged everything and who will bill for 'consulting services'...

[ Parent | on HN ]
Re:Garmin obtains decryption key after ransomware attack by Alex3917 on Monday July 27, 2020 @06:59PM (#23970403)
> I don't think that it is illegal to pay a ransom in general under US law.

I mean I’m pretty sure you’re not allowed to go wire money to Al Qaeda, or to conspire to evade anti money laundering controls in order to do so.

[ Parent | on HN ]
Re:Garmin obtains decryption key after ransomware attack by mytailorisrich on Tuesday July 28, 2020 @03:13AM (#23973144)
That's why I wrote 'in general' and that there were caveats related to terrorism.

Money laundering is another issue. In general I think people are still free to spend their legitimate money (it's not money laundering to begin with).

[ Parent | on HN ]