11–20 of 56 posts
I wonder about whether governments could make it illegal to pay ransomware. If a business from country X could not legally pay, then what would be the point of attacking any company from country X?
Then the payment will be done by "underground payment processors" with a hefty extra fee. It wouldn't solve the problem I think, only shift the path an organization has to take.
Ransomware obviously only works if people are paying. Just stop that and it will go away. Oh, and of course make sure it can't happen in the beginning.
Ransomware obviously only works if people are paying. Just stop that and it will go away. Oh, and of course make sure it can't happen in the beginning.
ha! That is brilliant idea, how come nobody ever though of it before?
It's not like Ransomware is some god-given thing that just happens.
There's a case in Germany right now where the critical Confluence bug was simply not patched for two weeks after the notice that there's a critical bug/exploit. Now the systems are down and everybody's wondering how that could probably have happened...
"Won't happen here" is easier than taking care.
Ransomware obviously only works if people are paying. Just stop that and it will go away. Oh, and of course make sure it can't happen in the beginning.
That's victim blaming. Even if we don't pay up, people will still spread ransomware just for shits and giggles. The cat is out of the bag.
And?
In this case the victims are enabling a whole cottage industry of crime.
Earlier quoted context omitted.
That's victim blaming. Even if we don't pay up, people will still spread ransomware just for shits and giggles. The cat is out of the bag.
“That’s victim blaming” And? In this case the victims are enabling a whole cottage industry of crime.
Earlier quoted context omitted.
ha! That is brilliant idea, how come nobody ever though of it before?
I don't know. Seems to be easier (read "cheaper") to run shitty software and not train people well, so this doesn't happen in the first place. It's not like Ransomware is some god-given thing that just happens. There's a case in Germany right now where the critical Confluence bug was simply not patched for two weeks after the notice that there's a critical bug/exploit. Now the systems are down and everybody's wonderi…
'If you have prepared staff and software you are not going to be affected'
All of it is true, no discussion here.
But that's not how real world works. Complex systems, large staff of various skills, temporary access for temporary fix that becomes an established feature because there is something else more important, people leaving and so on.
That's how a company ends up with their DB not backed up or backed up locally so that's encrypted in the attack too.
And you need info on orders, deliveries, and money etc RIGHT NOW!
What do you do?
Ransomware attacks are now pervasive. I'd argue that even though most individual victims are not critical to national security, society as a whole is under attack. This makes it a national security emergency in my view.
Earlier quoted context omitted.
“That’s victim blaming” And? In this case the victims are enabling a whole cottage industry of crime.
Ransomware won't stop even if you don't pay up. Just destroying the target by data loss can be a sufficient reason for any attacker. No payment needed.
Earlier quoted context omitted.
Ransomware won't stop even if you don't pay up. Just destroying the target by data loss can be a sufficient reason for any attacker. No payment needed.
This is wildly incorrect. For criminal groups who intend on making money, that payment is needed on a certain subset of victims are they can’t stay in business.