News for hackers. Stuff that matters.
Re:Garmin obtains decryption key after ransomware attack by tzs on Monday July 27, 2020 @08:35PM (#23971011)
> They told me that although it's technically illegal, the U.S. government has never prosecuted anyone for paying a ransom

If I was going to take a job doing something that is illegal, I think I might prefer one where the government has prosecuted people. Then I could look at those cases and see what people got off with just probation, which got light sentences, which got harsh sentences, what kind of plea deals were offered. Then I could at least have a decent chance of figuring out if the pay and benefits are worth the risk.

If they haven't prosecuted anyone (and this is not a line of work that has been around for a very long time), I'd worry that they just haven't gotten around to it yet, and I could end up being the first. Being first could be very bad, because they might be pushing for a harsh sentence to discourage others or encourage people prosecuted later to take plea bargains.

Re:Garmin obtains decryption key after ransomware attack by WrtCdEvrydy on Monday July 27, 2020 @09:05PM (#23971220)
To be honest, it's probably a third part company.

Funny enough, back when ransomware was simpler and used the same encryption key, we managed to recover one place by using Memory Forensics on a fucked machine.

I wonder if extracting the key, decrypting the files to not pay $100,000 in BTC would be illegal in some way.

Re:Garmin obtains decryption key after ransomware attack by Simon_says on Monday July 27, 2020 @10:09PM (#23971625)
Of course. In the US it violates DMCA.
Re:Garmin obtains decryption key after ransomware attack by nix23 on Tuesday July 28, 2020 @05:43AM (#23974023)
Yes ransomware has copyrights too and often its closed source, so take the key out (disassemble) would be illegal ;)
Re:Garmin obtains decryption key after ransomware attack by cxr on Tuesday July 28, 2020 @11:22AM (#23976722)
This is simply not true.