December 8, 2022

Global War on Ransomware? Hurdles Hinder US Response | Voice of America

RICHMOND, VIRGINIA – Foreign keyboard criminals with scant fear of repercussions have paralyzed U.S. schools and hospitals, leaked highly sensitive police files, triggered fuel shortages and, most recently, threatened global food supply chains.

Escalating havoc caused by ransomware gangs raises an obvious question: Why has the United States, believed to have the world’s greatest cyber capabilities, looked so powerless to protect its citizens from these kind of criminals operating with near impunity out of Russia and allied countries?

The answer is that there are numerous technological, legal and diplomatic hurdles to going after ransomware gangs. Until recently, it just hasn’t been a high priority for the U.S. government.

That has changed as the problem has grown well beyond an economic nuisance. President Joe Biden intends to confront Russia’s leader, Vladimir Putin, about Moscow’s harboring of ransomware criminals when the two men meet in Europe later this month. The Biden administration has also promised to boost defenses against attacks, improve efforts to prosecute those responsible and build diplomatic alliances to pressure countries that harbor ransomware gangs.

Calls are growing for the administration to direct U.S. intelligence agencies and the military to attack ransomware gangs’ technical infrastructure used for hacking, posting sensitive victim data on the dark web and storing digital currency payouts.

Fighting ransomware requires the nonlethal equivalent of the “global war on terrorism” launched after the Sept. 11 attacks, said John Riggi, a former FBI agent and senior adviser for cybersecurity and risk for the America Hospital Association. Its members have been hard hit by ransomware gangs during the coronavirus pandemic.

“It should include a combination of diplomatic, financial, law enforcement, intelligence operations, of course, and military operations,” Riggi said.

A public-private task force including Microsoft and Amazon made similar suggestions in an 81-page report that called for intelligence agencies and the Pentagon’s U.S. Cyber Command to work with other agencies to “prioritize ransomware disruption operations.”

“Take their infrastructure away, go after their wallets, their ability to cash out,” said Philip Reiner, a lead author of the report. He worked at the National Security Council during the Obama presidency and is now CEO at The Institute for Security and Technology.

GREELEY, CO - JUNE 01: A JBS Processing Plant stands dormant after halting operations on June 1, 2021 in Greeley, Colorado. JBS…
A JBS Processing Plant stands dormant after halting operations on June 1, 2021, in Greeley, Colorado. JBS facilities around the globe were impacted by a ransomware attack, forcing many of its facilities to shut down.

But the difficulties of taking down ransomware gangs and other cybercriminals have long been clear. The FBI’s list of most-wanted cyber fugitives has grown at a rapid clip and now has more than 100 entries, many of whom are not exactly hiding. Evgeniy Bogachev, indicted nearly a decade ago for what prosecutors say was a wave of cyber bank thefts, lives in a Russian resort town and “is known to enjoy boating” on the Black Sea, according to the FBI’s wanted listing.

Ransomware gangs can move around, do not need much infrastructure to operate and can shield their identities. They also operate in a decentralized network. For instance, DarkSide, the group responsible for the Colonial Pipeline attack that led to fuel shortages in the South, rents out its ransomware software to partners to carry out attacks.

Katie Nickels, director of intelligence at the cybersecurity firm Red Canary, said identifying and disrupting ransomware criminals takes time and serious effort.

“A lot of people misunderstand that the government can’t just willy-nilly go out and press a button and say, well, nuke that computer,” she said. “Trying to attribute to a person in cyberspace is not an easy task, even for intelligence communities.”

Reiner said those limits do not mean the United States cannot still make progress against defeating ransomware, comparing it with America’s ability to degrade the terrorist group al-Qaida while not capturing its leader, Ayman al-Zawahiri, who took over after U.S. troops killed Osama bin Laden.

“We can fairly easily make the argument that al-Qaida no longer poses a threat to the homeland,” Reiner said. “So, short of getting al-Zawahiri, you destroy his ability to actually operate. That’s what you can do to these [ransomware] guys.”

The White House has been vague about whether it plans to use offensive cyber measures against ransomware gangs. Press secretary Jen Psaki said Wednesday that “we’re not going to take options off the table,” but she did not elaborate. Her comments followed a ransomware attack by a Russian gang that caused outages at Brazil’s JBS SA, the second-largest producer of beef, pork and chicken in the United States.

Tanker trucks are parked near the entrance of Colonial Pipeline Company Wednesday, May 12, 2021, in Charlotte, N.C.  The…
FILE – Tanker trucks are parked near the entrance of Colonial Pipeline Company, May 12, 2021, in Charlotte, N.C. The operator of the nation’s largest fuel pipeline paid $4.4 million to a gang of hackers who broke into its computer systems.

Gen. Paul Nakasone, who leads U.S. Cyber Command and the National Security Agency, said at a recent symposium that he believes the U.S. will be “bringing the weight of our nation,” including the Defense Department, “to take down this [ransomware] infrastructure outside the United States.”

Sen. Angus King, an independent from Maine who is a legislative leader on cybersecurity issues, said the debate in Congress over how aggressive the U.S. needs to be against ransomware gangs, as well as state adversaries, will be “front and center of the next month or two.”

“To be honest, it’s complicated because you’re talking about using government agencies, government capabilities to go after private citizens in another country,” he said.

The U.S. is widely believed to have the best offensive cyber capabilities in the world, though details about such highly classified activities are scant. Documents leaked by former NSA contractor Edward Snowden show the U.S. conducted 231 offensive cyber operations in 2011. More than a decade ago a virus called Stuxnet attacked control units for centrifuges in an underground site in Iran, causing the sensitive devices to spin out of control and destroy themselves. The cyberattack was attributed to America and Israel.

U.S. policy called “persistent engagement” already authorizes cyberwarriors to engage hostile hackers in cyberspace and disrupt their operations with code. U.S. Cyber Command has launched offensive operations related to election security, including against Russian misinformation officials during U.S. midterm elections in 2018.

After the Colonial Pipeline attack, Biden promised that his administration was committed to bringing foreign cybercriminals to justice. Yet even as he was speaking from the White House, a different Russian-linked ransomware gang was leaking thousands of highly sensitive internal files — including deeply personal background checks — belonging to the police department in the nation’s capital. Experts believe it’s the worst ransomware attack against a U.S.-based law enforcement agency.

“We are not afraid of anyone,” the hackers wrote in a follow-up post. 

in U.S.
Related Posts

US Supreme Court Gives States More Leeway to Restrict Voting | Voice of America

July 1, 2021

July 1, 2021

The U.S. Supreme Court on Thursday made it easier Thursday for states to enact voting restrictions, endorsing Republican-backed measures in...

Swim Caps for Thick, Curly Hair Not Allowed at Olympics | Voice of America

July 3, 2021

July 3, 2021

Swimming caps designed for natural Black hair won’t be allowed at the upcoming Tokyo Olympics, with the sport’s world governing...

US Sends Pakistan Health Supplies to Combat COVID-19 | Voice of America

June 5, 2021

June 5, 2021

ISLAMABAD – The United States mobilized an airlift of critical health supplies that arrived in Pakistan Saturday to help the...

US Targets Belarus with Sanctions Amid Western Outcry Over Plane | Voice of America

May 29, 2021

May 29, 2021

WASHINGTON – The United States on Friday announced punitive measures against Belarus targeting the regime of strongman President Alexander Lukashenko,...

US to Hold Belarus Accountable Amid Report of Border Closure, Says Senior Official | Voice of America

July 3, 2021

July 3, 2021

WASHINGTON – The U.S. government is aware of reports that Belarus has closed its border with neighboring Ukraine, a senior...

Biden to GOP: ‘Don’t Get in the Way’ of Infrastructure Plan | Voice of America

May 28, 2021

May 28, 2021

WASHINGTON – President Joe Biden on Thursday warned naysayers in Congress not to “get in the way” of his big...

Texas Legislature Advances Voting Restrictions | Voice of America

May 30, 2021

May 30, 2021

AUSTIN, TEXAS – Majority Republicans in the Texas Senate on Sunday approved one of the most restrictive new voting laws...

Biden to Return Diverted Border Wall Money, Spend Down Rest | Voice of America

June 12, 2021

June 12, 2021

Former President Donald Trump’s signature border wall project would lose much of its funding as well as the fast-track status...

G-7 Communique Wide-Ranging, But Critics Find Shortcomings    | Voice of America

June 13, 2021

June 13, 2021

BRUSSELS – U.S. President Joe Biden has declared that the G-7 summit was an “extraordinarily collaborative and productive meeting” that...

National Guard Ends US Capitol Protection  | Voice of America

May 24, 2021

May 24, 2021

National Guard troops are leaving Washington on Monday after protecting the U.S. Capitol for nearly five months following the deadly...

With Afghanistan’s Future at Stake, US Courting Pakistan | Voice of America

May 25, 2021

May 25, 2021

 PENTAGON/STATE DEPARTMENT/ISLAMABAD – More than three weeks into the U.S. withdrawal from Afghanistan, Washington’s plans to help ensure the country...

Video: Shackled Black Man Ordered Facedown in Deadly Arrest | Voice of America

May 22, 2021

May 22, 2021

NEW ORLEANS – Beaten and shackled by Louisiana state troopers, Black motorist Ronald Greene desperately tried to roll over in...

Blinken’s Visit to Jordan Ends Tour to Solidify Mideast Cease-fire | Voice of America

May 26, 2021

May 26, 2021

U.S. Secretary of State Antony Blinken on Wednesday ended his Middle East tour to bolster the cease-fire agreement between Israel...

US Supreme Court Seeks Biden Views on Harvard Admissions Dispute | Voice of America

June 14, 2021

June 14, 2021

WASHINGTON – The U.S. Supreme Court on Monday asked President Joe Biden’s administration to give its views on whether the...

Criminal Tax Charges Filed Against Trump Organization, Its Chief Financial Officer | Voice of America

July 1, 2021

July 1, 2021

Prosecutors in New York on Thursday accused the Trump Organization, former U.S. President Donald Trump’s global real estate business empire,...