News for hackers. Stuff that matters.

A comment on Confessions of a Ransomware Negotiator. Parent comment

Re:Confessions of a Ransomware Negotiator by infinityplus1 on Tuesday September 14, 2021 @12:03PM (#28526801)
Those who pay the attackers might have no other choice. Sure they should have taken backups. But right now they don't have any. What else can they do? Maybe government can enact laws asking to maintain backups regularly in critical industries.
[ Parent | on HN ]
Re:Confessions of a Ransomware Negotiator by teddyh on Tuesday September 14, 2021 @12:07PM (#28526851)
> What else can they do?

They can take the hit and live without their data, thereby making the world safer for the rest of us. Focusing only on their own personal problem is the definition of selfishness.

[ Parent | on HN ]
Re:Confessions of a Ransomware Negotiator by marcos100 on Tuesday September 14, 2021 @02:20PM (#28528626)
Would you let your company that earns millions for a ransomware that is asking tens of thousands of dollars?
[ Parent | on HN ]
Re:Confessions of a Ransomware Negotiator by m-p-3 on Tuesday September 14, 2021 @04:03PM (#28530297)
If your company that owns millions doesn't have a backup of the mission-critical data somewhere, you have a bigger problem.
[ Parent | on HN ]
Re:Confessions of a Ransomware Negotiator by rexer on Tuesday September 14, 2021 @06:38PM (#28532465)
No. In that moment your biggest problem is that all your data is inaccessible. That you don’t have backups reduces options since it precludes that solution, but another one exists: pay the ransom.
[ Parent | on HN ]
Re:Confessions of a Ransomware Negotiator by martin_a on Wednesday September 15, 2021 @03:44AM (#28536380)
> Maybe government can enact laws asking to maintain backups regularly in critical industries.

That's a step in the right direction, but we need more.

If you're critial industry and get ransomwared there should be hefty fines for everyone involved from the top down.

Also there should be hefty fines for any data leaks that are a result of ransomware attacks.

Companies will start moving when getting ransomwared due to low security standards is a major impact on your financials and not like some "put 50k aside for data hostage situations".

[ Parent | on HN ]
Re:Confessions of a Ransomware Negotiator by psd1 on Wednesday September 15, 2021 @12:03AM (#28535142)
Continuity is part of regulation in some industries, yes
[ Parent | on HN ]