July 2, 2022

Global War on Ransomware? Hurdles Hinder US Response | Voice of America

RICHMOND, VIRGINIA – Foreign keyboard criminals with scant fear of repercussions have paralyzed U.S. schools and hospitals, leaked highly sensitive police files, triggered fuel shortages and, most recently, threatened global food supply chains.

Escalating havoc caused by ransomware gangs raises an obvious question: Why has the United States, believed to have the world’s greatest cyber capabilities, looked so powerless to protect its citizens from these kind of criminals operating with near impunity out of Russia and allied countries?

The answer is that there are numerous technological, legal and diplomatic hurdles to going after ransomware gangs. Until recently, it just hasn’t been a high priority for the U.S. government.

That has changed as the problem has grown well beyond an economic nuisance. President Joe Biden intends to confront Russia’s leader, Vladimir Putin, about Moscow’s harboring of ransomware criminals when the two men meet in Europe later this month. The Biden administration has also promised to boost defenses against attacks, improve efforts to prosecute those responsible and build diplomatic alliances to pressure countries that harbor ransomware gangs.

Calls are growing for the administration to direct U.S. intelligence agencies and the military to attack ransomware gangs’ technical infrastructure used for hacking, posting sensitive victim data on the dark web and storing digital currency payouts.

Fighting ransomware requires the nonlethal equivalent of the “global war on terrorism” launched after the Sept. 11 attacks, said John Riggi, a former FBI agent and senior adviser for cybersecurity and risk for the America Hospital Association. Its members have been hard hit by ransomware gangs during the coronavirus pandemic.

“It should include a combination of diplomatic, financial, law enforcement, intelligence operations, of course, and military operations,” Riggi said.

A public-private task force including Microsoft and Amazon made similar suggestions in an 81-page report that called for intelligence agencies and the Pentagon’s U.S. Cyber Command to work with other agencies to “prioritize ransomware disruption operations.”

“Take their infrastructure away, go after their wallets, their ability to cash out,” said Philip Reiner, a lead author of the report. He worked at the National Security Council during the Obama presidency and is now CEO at The Institute for Security and Technology.

GREELEY, CO - JUNE 01: A JBS Processing Plant stands dormant after halting operations on June 1, 2021 in Greeley, Colorado. JBS…
A JBS Processing Plant stands dormant after halting operations on June 1, 2021, in Greeley, Colorado. JBS facilities around the globe were impacted by a ransomware attack, forcing many of its facilities to shut down.

But the difficulties of taking down ransomware gangs and other cybercriminals have long been clear. The FBI’s list of most-wanted cyber fugitives has grown at a rapid clip and now has more than 100 entries, many of whom are not exactly hiding. Evgeniy Bogachev, indicted nearly a decade ago for what prosecutors say was a wave of cyber bank thefts, lives in a Russian resort town and “is known to enjoy boating” on the Black Sea, according to the FBI’s wanted listing.

Ransomware gangs can move around, do not need much infrastructure to operate and can shield their identities. They also operate in a decentralized network. For instance, DarkSide, the group responsible for the Colonial Pipeline attack that led to fuel shortages in the South, rents out its ransomware software to partners to carry out attacks.

Katie Nickels, director of intelligence at the cybersecurity firm Red Canary, said identifying and disrupting ransomware criminals takes time and serious effort.

“A lot of people misunderstand that the government can’t just willy-nilly go out and press a button and say, well, nuke that computer,” she said. “Trying to attribute to a person in cyberspace is not an easy task, even for intelligence communities.”

Reiner said those limits do not mean the United States cannot still make progress against defeating ransomware, comparing it with America’s ability to degrade the terrorist group al-Qaida while not capturing its leader, Ayman al-Zawahiri, who took over after U.S. troops killed Osama bin Laden.

“We can fairly easily make the argument that al-Qaida no longer poses a threat to the homeland,” Reiner said. “So, short of getting al-Zawahiri, you destroy his ability to actually operate. That’s what you can do to these [ransomware] guys.”

The White House has been vague about whether it plans to use offensive cyber measures against ransomware gangs. Press secretary Jen Psaki said Wednesday that “we’re not going to take options off the table,” but she did not elaborate. Her comments followed a ransomware attack by a Russian gang that caused outages at Brazil’s JBS SA, the second-largest producer of beef, pork and chicken in the United States.

Tanker trucks are parked near the entrance of Colonial Pipeline Company Wednesday, May 12, 2021, in Charlotte, N.C.  The…
FILE – Tanker trucks are parked near the entrance of Colonial Pipeline Company, May 12, 2021, in Charlotte, N.C. The operator of the nation’s largest fuel pipeline paid $4.4 million to a gang of hackers who broke into its computer systems.

Gen. Paul Nakasone, who leads U.S. Cyber Command and the National Security Agency, said at a recent symposium that he believes the U.S. will be “bringing the weight of our nation,” including the Defense Department, “to take down this [ransomware] infrastructure outside the United States.”

Sen. Angus King, an independent from Maine who is a legislative leader on cybersecurity issues, said the debate in Congress over how aggressive the U.S. needs to be against ransomware gangs, as well as state adversaries, will be “front and center of the next month or two.”

“To be honest, it’s complicated because you’re talking about using government agencies, government capabilities to go after private citizens in another country,” he said.

The U.S. is widely believed to have the best offensive cyber capabilities in the world, though details about such highly classified activities are scant. Documents leaked by former NSA contractor Edward Snowden show the U.S. conducted 231 offensive cyber operations in 2011. More than a decade ago a virus called Stuxnet attacked control units for centrifuges in an underground site in Iran, causing the sensitive devices to spin out of control and destroy themselves. The cyberattack was attributed to America and Israel.

U.S. policy called “persistent engagement” already authorizes cyberwarriors to engage hostile hackers in cyberspace and disrupt their operations with code. U.S. Cyber Command has launched offensive operations related to election security, including against Russian misinformation officials during U.S. midterm elections in 2018.

After the Colonial Pipeline attack, Biden promised that his administration was committed to bringing foreign cybercriminals to justice. Yet even as he was speaking from the White House, a different Russian-linked ransomware gang was leaking thousands of highly sensitive internal files — including deeply personal background checks — belonging to the police department in the nation’s capital. Experts believe it’s the worst ransomware attack against a U.S.-based law enforcement agency.

“We are not afraid of anyone,” the hackers wrote in a follow-up post. 

in U.S.
Related Posts

Harris Emphasizes Addressing ‘Root Causes’ of Migration | Voice of America

June 9, 2021

June 9, 2021

U.S. Vice President Kamala Harris stressed the importance of fixing the “root causes” of migration in her final remarks during...

COVID, Climate Change, Food Security Top G-20 Ministers Agenda | Voice of America

June 29, 2021

June 29, 2021

The coronavirus, climate change and food security are on the agenda Tuesday as foreign ministers from the G-20 group of...

Can Money Absolve Sins of the Past?

June 29, 2021

June 29, 2021

The issue of reparations — making amends for historical wrongs perpetrated against a group or population — has always been highly controversial. But to the victims of atrocities like genocide and slavery, offering...

US State Department Names 17 Countries as Worst Offenders in Fighting Human Trafficking | Voice of America

July 1, 2021

July 1, 2021

The State Department called out 17 countries Thursday for their lack of action regarding human trafficking. The announcement came in...

Biden’s $6 Trillion Budget Sidesteps Some Campaign Pledges | Voice of America

June 2, 2021

June 2, 2021

WASHINGTON – When Democrat Joe Biden ran for vice president in 2008, he delivered a speech in which he repeated...

Pentagon Report on UFOs Expected This Week | Voice of America

June 24, 2021

June 24, 2021

What do the Pentagon, the FBI and other U.S. intelligence agencies know about UFOs? A report due this week is...

Biden Administration to Bring Parents of Separated Migrant Children Back to US | Voice of America

June 11, 2021

June 11, 2021

The Department of Homeland Security (DHS) is using its humanitarian authority to reunite families separated in 2018 at the U.S.-Mexico...

Biden Budget Substantially Boosts Foreign Aid, Diplomacy, but Raises Defense by 1.7% | Voice of America

May 29, 2021

May 29, 2021

U.S. President Joe Biden sent his first formal budget request to Congress on Friday afternoon, detailing a proposal to spend...

New York Film Industry Booming Despite COVID Pandemic | Voice of America

June 6, 2021

June 6, 2021

As New York COVID restrictions ease, Broadway is hoping to draw people back to the theater while the movie industry...

Harris Emphasizes ‘Power of Hope’ to Keep Latin Americans from Migrating to US | Voice of America

June 7, 2021

June 7, 2021

U.S. Vice President Kamala Harris emphasized “the power of hope” Monday, along with new efforts to fight corruption to persuade...

Biden, Western Governors to Discuss Wildfire Response | Voice of America

June 30, 2021

June 30, 2021

U.S. President Joe Biden is holding talks Wednesday with a group of governors from eight Western states about wildfire preparedness...

Spam Is No Longer Just Luncheon Meat for Sandwiches | Voice of America

May 31, 2021

May 31, 2021

Before “spam” became a computer term, it was an American luncheon meat that was exported and embraced by cultures around...

Case Files From 1964 US Civil Rights Worker Killings Made Public | Voice of America

June 27, 2021

June 27, 2021

JACKSON, MISSISSIPPI – Never before seen case files, photographs and other records documenting the investigation into the slayings of three...

US Outlines Its Global COVID Vaccine Sharing Plan | Voice of America

June 21, 2021

June 21, 2021

The White House has laid out its plans for sharing 55 million COVID-19 vaccine doses abroad, with most of the...

Reparations: Can Money Absolve the Sins of the Past?

June 29, 2021

June 29, 2021

The issue of reparations — making amends for historical wrongs perpetrated against a group or population — has always been highly controversial. But to the victims of atrocities like genocide and slavery, offering...