Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DarkSide ransomware gang quits after servers, Bitcoin stash seized

krebsonsecurity.com

Post reply on HN
Print view View original

461–470 of 623 posts

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#461

Post by bityard »

TrackerFF wrote: post #202
bredren wrote: post #45

It was a mistake to attack the business side of the oil company, because it created what could be sold as reasonable doubt to shut down the pipeline. As a result, the ransom had the optics of an attack on infrastructure. As evidenced by the coverage of Americans desperately filling up containers. This created the impetus for the US to treat this as an incident far and above the ambient ransomware activities leading u…

I got downvoted for saying that maybe it's time to treat serious ransomware attacks (infrastructure, security, health, etc.) as terrorism - as in the sense that they're a threat to the national security. But this kinda shows the response I was referencing to. A lot of people like to think of ransomware attacks as the ultimate stress test as far as security goes, and thus a good thing - but let's not get too blinded b…

You could treat ransomware attacks with the same seriousness as terrorism since the practical effects are similar, but the key point of terrorism is that it is politically motivated. So a terrorist group could launch a ransomware attack, but not all ransomware campaigns are terrorism.

The meanings of words is important; rational discussion is impossible when people shift commonly-accepted meanings and definitions to suit their agenda. It's an extremely common strategy in politics. And the word "terrorism" already received more than its fair share of this treatment quite thoroughly in the decade following 9/11.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#462

Post by [deleted] »

myth_buster wrote: post #429
Godel_unicode wrote: post #186

Earlier quoted context omitted.

I'm not sure what point this comment is trying to make, according to CISA emergency services are a critical infrastructure sector. Therefore attacks on hospitals are attacks on critical infrastructure just like a pipeline.

Five distinct disciplines compose the ESS, encompassing a wide range of emergency response functions and roles: * Law Enforcement * Fire and Rescue Services * Emergency Medical Services * Emergency Management * Public Works Emergency Medical Services ≠ Hospital

[deleted]

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#463

Post by hinkley »

TrackerFF wrote: post #202
bredren wrote: post #45

It was a mistake to attack the business side of the oil company, because it created what could be sold as reasonable doubt to shut down the pipeline. As a result, the ransom had the optics of an attack on infrastructure. As evidenced by the coverage of Americans desperately filling up containers. This created the impetus for the US to treat this as an incident far and above the ambient ransomware activities leading u…

I got downvoted for saying that maybe it's time to treat serious ransomware attacks (infrastructure, security, health, etc.) as terrorism - as in the sense that they're a threat to the national security. But this kinda shows the response I was referencing to. A lot of people like to think of ransomware attacks as the ultimate stress test as far as security goes, and thus a good thing - but let's not get too blinded b…

As far as I'm concerned, ransomware attacks essentially fall into the same classification as highwaymen, bandits, and pirates. We tend to take those pretty seriously. Or at least, we did once they've robbed the wrong people.

Sounds like the ransomeware people finally robbed the wrong people.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#464

Post by jkubicek »

dbt00 wrote: post #109
jkubicek wrote: post #91

Earlier quoted context omitted.

I think the parent's point was that if oil infrastructure is completely disrupted, consumers won't even be affected for a few days and the short-term consequences will be somewhat minor (some percentage of drivers won't be able to drive, deliveries may be delayed). If a hospital is shut down, then people will start dying immediately. The consequences are much more direct and severe.

I think this is simplistic and overlooks logistics and flexibility. If a hospital closes, patients can be moved. If there's no gas, patients can't get to any hospital.

My point (which wasn't well made, admittedly) is that a closed hospital has immediate and material effects. Disrupted petroleum infrastructure isn't going to affect consumers for days.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#466

Post by smabie »

kube-system wrote: post #284
CobsterLock wrote: post #274

Earlier quoted context omitted.

I could see 10 developers costing that much

$500,000 salary? Let me know where these jobs are because I'd like to submit my resume.

A 500k isn't all that unusual in tech I feel like..

Like a senior engineer at a FANG is probably making that much or more all in.

Entry level salary for tier one firms across finance and tech is probably around 250-300k. Not hard to get to 500k with some experience.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#467

Post by notatoad »

thesuperbigfrog wrote: post #325
schoen wrote: post #259

Earlier quoted context omitted.

Maybe people didn't like your use of the term "terrorism" for national security threats? A common understanding is that terrorism is intended to frighten people or make them feel unsafe, while various official definitions of terrorism include the idea that it's intended to coercively achieve some particular political goal. If attackers just intend to get money, they're probably well-described as extortionists (or in…

On the high seas of the Internet there is a thin line between pirates and state actors. There could even be "privateer" ( https://en.wikipedia.org/wiki/Privateer ) attackers who work for a nation and for profit at the same time. From the victim's perspective it matters less who is attacking you or why they are attacking you and much more what the results of the attack are, how you can mitigate and recover from the da…

>On the high seas of the Internet there is a thin line between pirates and state actors

maybe in as far as their capabilities go, but the important characteristic of a state actor is that retaliating against them is construed as a retaliation against the state that backs them. Darkside is very different to a state actor, as demonstrated here - retaliation has no significant geopolitical implications, so it can be swift and harsh.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#468

Post by Forbo »

fencepost wrote: post #380
vkou wrote: post #266

Earlier quoted context omitted.

Terrorism is a non-state use of violence for political aims. Ransomware is non-state, not violent, and is done for economic, not political aims.

Ransomware is non-state Are there no ransomware operations linked to North Korea? I was under the impression that there was some level of activity there to maintain supplies of globally-usable currency.

Last I heard, they were more oriented toward cryptocurrency trojans and botnet mining operations, but I could be mistaken.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#469

Post by simcup »

TacticalCoder wrote: post #415
lancemurdock wrote: post #381

Earlier quoted context omitted.

so which is it then? "BTC is bad cause it can be used by drug dealers to launder money" "BTC is not even secure from government access" Surely someone will point out both can be true but the point is the anti-btc folks seem to be talking out both sides of the mouth

> Surely someone will point out both can be true but the point is the anti-btc folks seem to be talking out both sides of the mouth The most beautiful being: "The cryptocurrencies scam should all stop but, please, let us collect all the due taxes on the gains you made". From that standpoint which one is it: are they legal or illegal? Because it's funny that they both want it to be illegal, yet they want people to pay…

Not hypocritic at all. From a legal perspective even illegal made money is money made and therefore subject of taxation. Tecnically you even have to describe the means by that you have come to it. Otherwise you are commiting tax evasion. For example if you sell 100k worth of access to documented child abuse, you have to pay taxes on those 100k. Thats why you have to launder money made from illegal activities

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#470

Post by Inhibit »

arcticbull wrote: post #351
TrackerFF wrote: post #202

Earlier quoted context omitted.

I got downvoted for saying that maybe it's time to treat serious ransomware attacks (infrastructure, security, health, etc.) as terrorism - as in the sense that they're a threat to the national security. But this kinda shows the response I was referencing to. A lot of people like to think of ransomware attacks as the ultimate stress test as far as security goes, and thus a good thing - but let's not get too blinded b…

IMO terrorism is a "waffle word" that doesn't really have any meaning anymore. Originally a use of violence and intimidation against civilians in pursuit of political ideology, it's come to mean "people we don't like, who aren't state actors and don't fit conventional organized crime narratives." I don't think it's necessary to staple the term to the action in order to take it seriously. It should, however, be taken…

To your point these folks seem pretty well defined as organized crime. Or possibly foreign military if appropriate.

I'm not sure leaving infrastructure hanging out in the breeze can be compensated for by cracking down on personal liberty, however. Unless you're proposing cutting off international computer network integration.

Post reply on HN