Re:80% of orgs that paid the ransom were hit again
by jjeaff on Friday June 18, 2021 @01:55PM
(#27552987)
It is already illegal in the US as of late 2020. But we know nothing really happens when corporations break the law.
https://cisomag.eccouncil.org/paying-ransom-is-now-illegal-u...
Re:80% of orgs that paid the ransom were hit again
by randomhodler84 on Friday June 18, 2021 @02:09PM
(#27553142)
Only for sanctioned parties I believe — which would apply for any money transfers regardless of purpose. Most random criminal rw attackers are not going to be on a sanction list.
Re:80% of orgs that paid the ransom were hit again
by Miner49er on Friday June 18, 2021 @01:54PM
(#27552982)
I think we should actually legalize ransomware. By that I mean create a government-ran national bug bounty program. All companies of a certain size are automatically included in it. Bounties are awarded based off severity, and bounties are paid for by fines to the companies hit.
Re:80% of orgs that paid the ransom were hit again
by trvrprkr on Friday June 18, 2021 @01:59PM
(#27553036)
Interesting idea. But what you're describing is absolutely not "ransomware."
Re:80% of orgs that paid the ransom were hit again
by schelling42 on Friday June 18, 2021 @04:29PM
(#27554647)
No. Not with profit margins that high compared to operational cost, it would not be an effective deterrent. They will just continue to hit as many targets as possible. You would end up punishing the victims.
What if they target some really critical infrastructure, where it would be rational to just pay and then fix the holes? Seek exemptions from law for each?
But it would be very interesting to see if the ransomware gangs can devise a scheme that gives the payer plausible deniability.
These people are just financing the next generation of cyber criminals.
Once people stop paying, people will stop attacking.