Ransomware Gang Threatens To Expose Police Informants If Ransom Is Not Paid (therecord.media) 52
An anonymous reader writes: A ransomware gang is threatening to leak sensitive police files that may expose police investigations and informants unless the Metropolitan Police Department of the District of Columbia agrees to pay a ransom demand. A group that emerged this year called Babuk claimed responsibility for the leak. Babuk is known for ransomware attacks, which hold victims' data hostage until they pay a ransom, often in Bitcoin. The group also hit the Houston Rockets N.B.A. team this month.
In their post to the dark web, Babuk's cybercriminals claimed they had downloaded 250 gigabytes of data and threatened to leak it if their ransom demands were not met in three days. They also threatened to release information about police informants to criminal gangs, and to continue attacking "the state sector," including the F.B.I. and the Department of Homeland Security's Cybersecurity and Infrastructure Security Agency. The information already released appeared to include chief's reports, lists of arrests and lists of persons of interest.
In their post to the dark web, Babuk's cybercriminals claimed they had downloaded 250 gigabytes of data and threatened to leak it if their ransom demands were not met in three days. They also threatened to release information about police informants to criminal gangs, and to continue attacking "the state sector," including the F.B.I. and the Department of Homeland Security's Cybersecurity and Infrastructure Security Agency. The information already released appeared to include chief's reports, lists of arrests and lists of persons of interest.
Difficult to ignore (Score:2)
Re: (Score:2)
Re: (Score:2)
Indeed. This is now way more than an annoyance (which is the level of threat no smart criminal ever exceeds). Time to find and then jail these stupid fuckers for a long, long time.
Re:Difficult to ignore (Score:5, Insightful)
Time to find and then jail these stupid fuckers for a long, long time.
Realistically, there is no plausible way to do that.
The solution to ransomware is prevention, not punishment.
The only people who can be punished are the incompetent bureaucrats in the DCPD, which won't happen.
Re: (Score:2)
Time to find and then jail these stupid fuckers for a long, long time.
Realistically, there is no plausible way to do that.
The solution to ransomware is prevention, not punishment.
The only people who can be punished are the incompetent bureaucrats in the DCPD, which won't happen.
The FBI and others have had some real success in tracing Bitcoin payments. Also, there are other ways.
But I do agree, this thing type of attack is far too easy to do and far too many are not prepared for the cleanup that needs to be done if an attack gets through.
There may be a legal angle that could be used as well: Make it a criminal act to pay.
Re: (Score:1)
The extortion attempt is stupid, they can not pay the extortion demand, it is illegal. A private business can slide through, a government agency can not really but sometimes does and a police and investigatory agency, most emphatically can not, they can try a set up but they most certainly can not pay.
If it is offshore, that individual or group of individuals are likely to get an illegal personal visit.
They made of themselves a criminal priority, probably up near number 1. Chances of getting away with it,
Re: (Score:2)
Indeed. Let us hope that at least some ransomware operators get caught and are made an example of. This is not crime driven by poverty, but simply by greed.
Re: (Score:2)
Re: (Score:2)
Mookie, SuperFly, and Huggy Bear.
There, now it’s out in the open and the the hackers have nothing.
Which Side? (Score:1)
Which side are we supposed to be on here?
Re: (Score:2)
Re: (Score:2)
Better yet cops then criminals, get two for one.
This is why the cops shouldn't pay. If they pay, they have no assurance the perps won't release the info anyway or demand more money.
Re: (Score:1)
Re: (Score:2)
I think the harder and more interesting question is: which side should we bet on?
Taunting a bear seems like a bad idea.
OTOH if they really think they've covered their tracks, then there aren't any bears.
Re: (Score:1)
https://www.masslive.com/news/... [masslive.com]
Carrillo was charged with manslaughter in October 2015, about a year after news broke that Sinacori had been working as a confidential informant for the UMass police department. Police had promised not to charge Sinacori or tell his parents he was caught with drugs in exchange.
https://www.dailymail.co.uk/ne... [dailymail.co.uk]
Francesca states in her complaint, filed in Hampshire Superior Court on October 3, that under the student code of conduct the university was required to notify the parents and/or guardians of a student if they were found to be in possession of illegal drugs.
The complaint goes on to claim that campus police did not follow this code, and instead kept these incidents a secret from administrators and parents if a student agreed to work with them as an informant.
This practice had actually been approved by the school to some degree, with the University of Massachusetts Police Department starting a program in 2009 that allowed students who were drug offenders to have their charges dropped or reduced if they worked with authorities.
The details of these deals were confidential, and the program was later amended in 2011 to allow campus police to also use drug addicts as informants, with the new policy noting that these individuals had to be 'carefully supervised and controlled.'
Re: (Score:1)
Parents or guardians? Really? Aren't these students adults?
Re: (Score:2)
You seem happy that police informants maybe murdered. I can only assume you think murdering people for helping law enforcement is a good thing.
But, I do know you are a coward because you didn't post under your account.
Fund the shooting. (Score:2)
A ransomware gang is threatening to leak sensitive police files that may expose police investigations and informants unless the Metropolitan Police Department of the District of Columbia agrees to pay a ransom demand.
The one time we need a good police shooting.
Let the CIA deal with it (Score:2)
Just let the CIA deal with the problem. I am sure they can eliminate ransomware gangs and it is not like those people have valued to the world.
Re: (Score:1)
CIA could be the ransomware gang
How come we never hear about Russian or Chinese, or drug cartel databases being held for ransom? Very suspicious...
Re: (Score:1)
Because they'll actually track you down and kill you
Re: (Score:3)
Which is what the CIA should also be doing. I am not going to shed a tear about them hunting down and killing ransomware gangs. It is much better than them overthrowing governments.
Re: (Score:1)
Sneaker net (Score:5, Insightful)
Stop using electronic files and keep informant info in locked filing cabinets
Re: (Score:2)
in a disused lavatory with a sign on the door saying "Beware of the Leopard."
Re: (Score:2)
Re: (Score:1)
They do not parrellel network. An internal network all wired and any hardware connected to it can not store data to portable media. Any files entering or exiting that network can only do so via the data security office, they check it before loading it and of course check to make sure you are entitled to the data when downloading it.
You have a parallel wireless network for communications, with cheap notebooks connected, for all internet communications and publicly accessible content. Each device checked whe
Re: (Score:2)
What you describe here may seem absurd to some, but it isn't. When it comes to military intelligence and secret agents, there are SCIF and similar requirements, while informants supporting large drug busts just sit in easily hackable databases?
Illigal to pay (Score:3)
Re: (Score:1)
Its illegal to pay the ransom
It is not illegal to pay a ransom.
Nor should it be. If we make it illegal, victims will be less willing to report the crimes and less willing to cooperate with the police.
Re:Illigal to pay (Score:5, Informative)
https://www.natlawreview.com/a... [natlawreview.com]
Re: (Score:2)
The legal theory that IEEPA prohibits ransoms has never been tested in court.
Even then, it would only prohibit paying ransom to specific foreign entities, which would be nearly impossible to prove. The organization at the other end of a ransomware attack is almost never known.
Re: (Score:1)
The legal theory that IEEPA prohibits ransoms has never been tested in court.
Courts can only test laws. Courts can't make laws.
You *just* said: "It is not illegal to pay a ransom." right here [slashdot.org]
How can a law that doesn't exist, be an existing law that isn't (or is) tested in court?
Re: (Score:2)
How can a law that doesn't exist, be an existing law that isn't (or is) tested in court?
The IEEPA exists but is ambiguous. You could interpret it to mean that it bans certain forms of ransom. No one has ever tried to do that in court, but they have threatened to do so.
But either way, it would not ban ransom for the act described in TFA.
A choice between ransomware gangs and cops? (Score:2)
Re: (Score:3)
It is also nice to know you don't give a shit about the lives of others such as the informants who help the police solve murders.
snitches get stitches (Score:2)
consider.
snitches have a set of survival rules that border on barbarism.
one such rule is that it is ok to kill a problem.
i think it would be lite comedy for the f b i to make public the names photos and addresses of this group of fellow ransomware bad guyz.
less paper work for law enforcement
First of its kind? (Score:1)
poison the well (Score:2)