Live data from Hacker News

DarkSide ransomware gang quits after servers, Bitcoin stash seized

krebsonsecurity.com

61–70 of 623 posts

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#61

Earlier quoted context omitted.

Crude insult. Akin to criticizing someone for "aligning with protecting his oxygen supply".

Cage match. Me with no gas vs. you with no oxygen

Sure. You with oxygen, me with gas ... and the striker omnipresent on my keychain. You're goin' down in flames.

:-)

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#62
post #22
post #7

why are ransomware groups transacting in BTC, which can be easily traced?

I would expect only Bitcoin markets to have the liquidity and depth where one can easily buy 5 million worth of coins. Similarly when the hackers want to sell the coins again.

Nah there are dozens of options where you could easily move 5 million a day. They are probably using bitcoin because it's easiest for the victim to pay in. I assume they would rotate it through zcash/monero before they spend it

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#63
post #20

Earlier quoted context omitted.

Oil shortages and long lines make for good/bad TV. Fear of bad media coverage energized the Govt. to act.

Perhaps part of the difference was that it took longer for the victim to pay this time. Presumably Hospitals cave before the impacts make the headlines.

I’ve got colleagues who have had radiology hardware that got locked - CT scanners specifically. The NHS paid and they were back to work in a couple of hours.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#64

So taking down hospitals and healthcare facilities was fair game. But messing with Big Oil was just a step too far.

That shouldn't be a much of a surprise; the US has always aligned itself with protecting it's oil supply.

Every country protects its food, water, and energy supply. Exceptions stop being countries.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#65
post #50

DarkSide's English is incredibly good for some supposed Russians. It even has the correct use of the apostrophe in "clients'". I know nothing, but my hunch is that this was written by a well-educated person who grew up in the US or Canada.

The lack of thick accents, hammer and sickle symbols, and hardbass leaves me seriously questioning the plausibility of this "Russian" theory.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#66

Seems like they should invest more into cybersecurity, if someone was able to “steal” their Bitcoin and take over their infrastructure ;). But honestly, this only shows that IT systems are nowadays so complex that you cannot get them right and be able to truly protect you, no matter if you’re good or bad guy.

> like they should invest more into cybersecurity

I would say invest more thought, less money.

For example, use open source more. Minimize the amount of data and information you have that needs to be closed source.

Avoid Windows. Use Gmail over Outlook. Have offline backups with sneakernet disaster planning. Get a cheap safety deposit box for storing keys. Use 2FA. There are lots of free/low cost ways to have better security.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#67
post #43

> The REvil representative said its program was introducing new restrictions on the kinds of organizations that affiliates could hold for ransom, and that henceforth it would be forbidden to attack those in the “social sector” (defined as healthcare and educational institutions) and organizations in the “gov-sector” (state) of any country. Affiliates also will be required to get approval before infecting victims. Sta…

The free market fundamentally rests on the respect for property rights.

Ransom-ware is a violation of said property right and thus an act of aggression therefore allowing for self defense.

Violation of property rights is always morally wrong.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#68

Seems like they should invest more into cybersecurity, if someone was able to “steal” their Bitcoin and take over their infrastructure ;). But honestly, this only shows that IT systems are nowadays so complex that you cannot get them right and be able to truly protect you, no matter if you’re good or bad guy.

https://xkcd.com/538/

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#69
post #45

It was a mistake to attack the business side of the oil company, because it created what could be sold as reasonable doubt to shut down the pipeline. As a result, the ransom had the optics of an attack on infrastructure. As evidenced by the coverage of Americans desperately filling up containers. This created the impetus for the US to treat this as an incident far and above the ambient ransomware activities leading u…

I think the question is, how come an attack on a hospital does not have the optics of an attack on infrastructure?

(It almost seems oil does not require infrastructure - you can, theoretically, prep for an oil infrastructure outage by storing it containers, same as you do with water and food. But you can't really prep for a medical infrastructure outage. Is it just that, as a result, there were no photos of people hoarding medical care and so there was less political will?)

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#70
post #19

Just like the mob there are some targets that just aren't worth it because they bring too much heat. They are learning this is bad for business all around so they are stepping back and encouraging others to do the same.

This is it. Governments have cyber abilities that far outstrip individual organizations. And when cyber fails, there are still other diplomatic and less diplomatic tools.

I wouldn't be surprised if the US Government here reached out to foreign governments for assistance in dismantling their infrastructure (it almost certainly was not on US soil).

An individual hospital probably couldn't garner that kind of backing, but oil pipelines? The US would probably be willing to use military strikes to keep the oil flowing. A small country would be very willing to help out to maintain good will.

Post reply on HN