The Beginning of the End for Ransomware?

Episode 439 of the Cyberlaw Podcast

We kick off a jam-packed episode of the Cyberlaw Podcast by flagging the news that ransomware revenue fell substantially in 2022. There is lots of room for error in that Chainalysis finding, Nick Weaver notes, but the size of the drop is large. Among the reasons to think it might also be real is a growing resistance to paying ransom on the part of companies and their insurers, who are especially concerned about liability for payments to sanctioned ransomware gangs. I also note a fascinating additional insight from Jon DiMaggio, who infiltrated the Lockbit ransomware gang. He says that, when Lockbit compromised and threatened to release Entrust's internal files, the company responded with days of Distributed Denial of Service (DDoS) attacks on Lockbit's infrastructure – and never did pay up. That would be a heartening display of courage on the part of corporate ransomware victims. It would also be a felony, at least according to the conventional wisdom that condemns hacking back. So I cannot help thinking there is more to the story. Like, maybe Canadian Security Intelligence Service is joining Australian Signals Directorate in releasing the hounds on ransomware gangs. I look forward to reading more about this undercovered disclosure.

Gus Hurwitz offers two explanations for the Federal Aviation Administration system outage, which grounded planes across the country. There's the official version and the conspiracy theory (as with everything else these days).

Nick breaks down the latest cryptocurrency failure; this time it's Genesis. Nick's not a fan of its prepackaged bankruptcy. And Gus and I puzzle over the Federal Trade Commission's peculiar determination to write regulations that will outlaw most non-compete clauses.

Justin Sherman, a first-timer on the podcast, covers recent research showing that alleged Russian social media election interference had no meaningful effect on the 2016 US election. That spurs an outburst from me about the cynical scam that  the "Russia, Russia, Russia" narrative became – a poisonous brand of election denial not different in spirit from Trump's, but one for which the press and the left have never been held to account.

Nick explains the impact of Twitter's looming interest payment obligation.  We're going to learn a lot more about Elon Musk from how he deals with that crisis than from anything he's tweeted in recent months.

It does not get more cyberlawyerly than a case the Supreme Court will be taking up this term – Gonzalez v. Google. The case will put Section 230 squarely on the Court's docket, and the amicus briefs can be measured by the shovelful. The issue is whether YouTube's recommendation of terrorist videos can ever lead to liability – or if any judgment is barred by Section 230. Gus and I are on different sides of that question, but we agree that this is going to be a hot case, a divided Court, and a big deal.

And, just to show that our foray into cyberlaw was no fluke, Gus and I also predict that the United States Court of Appeals for the District of Columbia Circuit is going to strike down the Allow States and Victims to Fight Online Sex Trafficking Act, also known as FOSTA-SESTA – the legislative exception to Section 230 that civil society loves to hate. Its prohibition on promotion of prostitution may fall to first amendment fears, but Gus predicts that the practical core of the law will remain.

Next, Justin gives us a quick primer on the national security reasons for regulation of submarine cables. Nick covers a leak of the terror watchlist thanks to an commuter airline's sloppy security. Justin explains TikTok's latest charm offensive in Washington.

Finally, I provide an update on the UK's online safety bill, which just keeps getting tougher, from criminal penalties, to "ten percent of revenue" fines, to mandating age checks that may fail technically, or drive away users, or both. And I review the latest theatrical offering from Madison Square Garden – "The Revenge of the Lawyers:" You may decide to root for the snake or for the scorpions, but you will not want to miss it.

You can subscribe to The Cyberlaw Podcast using iTunes, Google Play, Spotify, Pocket Casts, or our RSS feed. As always, The Cyberlaw Podcast is open to feedback. Be sure to engage with @stewartbaker on Twitter. Send your questions, comments, and suggestions for topics or interviewees to [e-mail]. Remember: If your suggested guest appears on the show, we will send you a highly coveted Cyberlaw Podcast mug! The views expressed in this podcast are those of the speakers and do not reflect the opinions of their institutions, clients, friends, families, or pets.

Comments

[Randal]

That spurs an outburst from me about the cynical scam that the “Russia, Russia, Russia” narrative became – a poisonous a brand of election denial not different in spirit from Trump’s…

Don’t be such a ‘tard, it’s totally different in spirit than Trump’s. “We would’ve won if it weren’t for X, but didn’t actually win” is something every loser says. X could be Russian interference, an election-day snowstorm, an October surprise, a polling-driven media narrative, an “unfair” debate moderator, ignorant voters, Comey, an economic report, a bad campaign manager, a pop culture phenomenon, an international incident, a last-minute gaffe, or a mean-spirited attack ad about a swift boat.

Trump is saying something very different. He’s saying “we actually did win the vote.”

If you can’t see the difference, you’re deep in the cult.

[OtisAH]

[wrong spot]

[OtisAH]

Musk is not sweating the first round of payments…

https://www.ign.com/articles/twitter-is-selling-its-surplus-office-furniture-including-a-bird-statue-for-100000

His problems really begin when he’s run out of furniture and fixtures to sell.

[Orbital Mechanic]

It is not difficult or particularly high-tech to defend yourself from ransomware or recover from it without paying ransom should it actually occur.

Robust system backups and decent security policies are something that can be learned in weeks and implemented with even a modest budget. But management has to take it seriously or it is useless.

Ransomware payments are down because the victim pool has wisened up a bit. But there are always a bunch of fools around so it won't go away completely.

[Parabluinc]

It's really crazy to know about ransomware attacks. But more crazy is to know how unprepared we are and how much worse things could get.

I mean, look at the example of the hospitals in Ireland. They had to call in the army to restore their Windows 7 PCs after a ransomware attack. That's insane!

Ransomware is no joke. It used to be simple stuff. But see how it has become a full industry. These cyber criminals are making millions. It's like organized cybercrime on a global scale. They've got their own marketplaces, tools and targets. It's scary how sophisticated they've become.

The best part of the blog is where it talks about everyone's role in this battle. Governments need to go after these gangs. International agreements should stop supporting them. Cybersecurity industry itself needs to step it up.

But honestly, I think it's not just their responsibility. We all need to act and protect ourselves. Ransomware is a real threat that we can't avoid.

Hope this blog be as a wake-up call for many like me. We start taking the necessary steps to defend against these attacks.
https://parablu.com/how-safe-is-onedrive-against-ransomware/