Iranians Hacked US Companies, Sent Ransom Demands To Printers, Indictment Says

Three Iranian nationals charged with hacking into US-based computer networks sent ransom demands to the printers of at least some of their victims, according to an indictment unsealed today. The ransom demands allegedly sought payments in exchange for BitLocker decryption keys that the victims could use to regain access to their data. The three defendants remain at large and outside the US, the DOJ said. From a report: "The defendants' hacking campaign exploited known vulnerabilities in commonly used network devices and software applications to gain access and exfiltrate data and information from victims' computer systems," the US Department of Justice said in a press release. Defendants Mansour Ahmadi, Ahmad Khatibi, Amir Hossein Nickaein, "and others also conducted encryption attacks against victims' computer systems, denying victims access to their systems and data unless a ransom payment was made." The indictment in US District Court for the District of New Jersey describes a few incidents in which ransom demands were sent to printers on hacked networks. In one case, a printed message sent to an accounting firm allegedly said, "We will sell your data if you decide not to pay or try to recover them." In another incident, the indictment said a Pennsylvania-based domestic violence shelter hacked in December 2021 received a message on its printers that said, "Hi. Do not take any action for recovery. Your files may be corrupted and not recoverable. Just contact us."

The real crime

[Opportunist]

The defendants' hacking campaign exploited known vulnerabilities in commonly used network devices and software applications to gain access and exfiltrate data and information from victims' computer systems

Translation: US companies too stupid and cheap to keep their computers secure, should be sued for damages by customers.

Re:The real crime

[Canberra1]

Whats the point of this extra-territorial out of legal jurisdiction alleged claim. How are the lawyers going to get paid?. The US has no extradition treaty with Iran, and pretty certain US nationals would not be deported to Iran. How about going after the bitcoin exchanges for allowing ransoms to be paid. This sounds like a scam, so the insurance company has to pay up on cyber insurance, despite clear cut contributory negligence. No mention of backups. Maybe the Iranians will sue for libel and slander, because these are just allegations, and prejudicial - just like OJ's case.You can see plenty of US based religious hate crimes - and I am sure Iran would like to bilaterally extradite some extreme US Koran deniers and goats. However if they get paid by the hour, I suppose North Korea will get a stern letter too., then Santa Claus.

Re:

[Geoffrey.landis]

Translation: US companies too stupid and cheap to keep their computers secure, should be sued for damages by customers.

The fact that the lock on your back door was one that was easy to jimmy open does not mean that burglars breaking the lock and stealing your stuff are not breaking the law.

Re: The real crime

[1s44c]

I read it the same way.

The bank left the front door and vault open over the weekend, yet deny any responsibility for the theft.

This is like backups. It's not important until it's too late. Then the management morons throw a hissy fit and look for someone else to blame.

Sounds like a good plot for a Hollywood movie

[thesjaakspoiler]

And as the grand finale, the company employees go crazy on the printer like in Office Space.
https://www.youtube.com/watch?... [youtube.com]

Re:

[bev_tech_rob]

And as the grand finale, the company employees go crazy on the printer like in Office Space. https://www.youtube.com/watch?... [youtube.com]

PC LOAD LETTER??!? Die Muthaf*cka, Die Muthaf*cka!

Ransom

[necro81]

Is there anyone that would pay a ransom for their printer? I thought everyone was more of the feeling of Office Space [youtube.com].

Not a problem

[PPH]

My printer [free-images.com] appears to be unaffected.

Commonly used software applications?

[takionya]

Whatever you do, don't mention Microsoft Windows /s

The Iranians couldn't collect the ransom though

[rsilvergun]

because nobody under 40 knows what a printer is and people who do still print documents couldn't figure out how to mail a Bitcoin.

Describe a ransomware attack...

[Zigakly]

...without using the word "ransomware"