News for hackers. Stuff that matters.
Re:Experts suggest AXA’s plan to shun ransomware payouts wil... by DyslexicAtheist on Tuesday May 11, 2021 @03:38AM (#27115323)
> This is why you need government intervention. Just make it illegal to pay such ransoms.

this penalizes the victim. Legally this might be impossible for the same reasons the law is unable to stop you from paying a ransom in kidnapping.

I'm not convinced this would affect the problem even if outlawed. Companies would simply go the path of least resistance the same way they do with avoiding tax. There will always be loopholes for shell / shelf companies to hide activities. The ransomware gangs themselves already today encourage you to reach out from private emails and promise smoother negotiation if you do.

Re:Experts suggest AXA’s plan to shun ransomware payouts wil... by paxys on Tuesday May 11, 2021 @04:01AM (#27115440)
There are several laws already on the books which address this – various international sanctions (https://www.reuters.com/article/us-treasury-cyber/companies-...), anti-terrorism laws (can't pay ransom to a known terrorist group), anti-money laundering laws and more. There is nothing stopping the government from enacting more.
Re:Experts suggest AXA’s plan to shun ransomware payouts wil... by dangerface on Tuesday May 11, 2021 @12:31PM (#27120169)
Businesses that don't look after their business are not victims, their unknowing customers are.
Re:Experts suggest AXA’s plan to shun ransomware payouts wil... by inter_netuser on Tuesday May 11, 2021 @03:57AM (#27115421)
a cybersecurity company to which you pay an annual retainer will just pay the attackers instead.

Communication will be done by lawyers and subject to strong confidentiality protection, no one will ever know.

Basically, exactly how it happens with kidnappings today.

Re:Experts suggest AXA’s plan to shun ransomware payouts wil... by asdfasgasdgasdg on Tuesday May 11, 2021 @12:33PM (#27120190)
Attorney-client privilege does not extend to lawyers doing illegal things on your behalf. For example, you can't ask your lawyer to hire a hitman to off a guy, and any evidence related to such activity will not be protected by attorney-client privilege.
Re:Experts suggest AXA’s plan to shun ransomware payouts wil... by inter_netuser on Tuesday May 11, 2021 @05:14PM (#27123617)
Please. There is a difference between saving a loved one, and hiring a hitman to kill one.

It's literally illegal to pay certain sanctioned organizations today for kidnappings - because they are designated terrorist orgs.

Who negotiates the ransom? Lawyers and security firms, been going on for a long long time.

Amusingly enough, this has even gone through courts in some places, you might wanna look up caselaw. They just decided to classify kidnappers as "criminals" for the ransom purposes, or some other such wordsmithing.

In the US these laws are simply ignored outright.

"The United States Code prohibits funding terrorist organizations, which includes the payment of ransom monies to terrorist organizations.2 However, the outlook in the United States on ransom payments being made to terrorist groups has softened. In June 2015, President Obama announced that private parties may negotiate with and pay ransoms to terrorist groups without fear of criminal prosecution, which has been the informal practice for years. In fact, nobody has ever been prosecuted for paying a ransom in the United States."

Just imagine your election prospects after jailing a mother who paid a ransom to save her child.

Imagine defending a claim that such law is constitutional, moral and just.