Started By
Message

re: Colonial Pipeline gave in: $5,000,000 paid to ransomware hackers

Posted on 5/14/21 at 9:34 am to
Posted by LegendInMyMind
Member since Apr 2019
71310 posts
Posted on 5/14/21 at 9:34 am to
That should be motivation enough to make sure it doesn't happen again.
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1599 posts
Posted on 5/14/21 at 9:36 am to
quote:

Cowards


How did they guarantee the hackers weren't pulling a Nigerian prince scheme and would fix the code after payment?


For a ransomware outfit, Darkside seems to care a lot about their reputation/PR. They offer tech support and even consulting on how to harden the victim's network after the ransom is paid

A Closer Look at DarkSide

As for being cowards, it is really a business decision and not a how bold/brave are you. Is it better/cheaper to pay the ransom, or can we get everything back up ourselves for cheaper (unlikely unless your business can be down for ~1000 years or you are a leader in the quantum computing sector), is it cheaper to restart from scratch.
This post was edited on 5/14/21 at 9:40 am
Posted by LegendInMyMind
Member since Apr 2019
71310 posts
Posted on 5/14/21 at 9:38 am to
quote:

Anne Neuberger, the White House’s deputy national security adviser for cyber and emerging technologies, acknowledged that some organizations might find paying the criminals off can be in their best interest.


What a bunch of fricking clowns.
Posted by Tempratt
Member since Oct 2013
14889 posts
Posted on 5/14/21 at 9:51 am to
I'm guessing their CIO is looking for a different career now.
Posted by TDsngumbo
Member since Oct 2011
48919 posts
Posted on 5/14/21 at 9:52 am to
Are you fricking kidding me? So I guess this shite will become the norm now that the world knows we’ll pay.

We are living in a country run by pussy arse children.
Posted by Mingo Was His NameO
Brooklyn
Member since Mar 2016
36367 posts
Posted on 5/14/21 at 9:53 am to
quote:

Are you fricking kidding me? So I guess this shite will become the norm now that the world knows we’ll pay


Are you under the impression this is new?
Posted by TDsngumbo
Member since Oct 2011
48919 posts
Posted on 5/14/21 at 9:54 am to
Well I’d like to think that America doesn’t give in to demands and does our own thing, not pay hackers to get access to our own shite.
Posted by lsu777
Lake Charles
Member since Jan 2004
36540 posts
Posted on 5/14/21 at 9:54 am to
quote:


Isn't bitcoin completely traceable? Now they know the wallet ID of the hackers and can monitor the wallet and monitor any transactions to and from that wallet and any connected wallets.




yes, but that is assuming the hackers follow finacial laws and do not tumble the coins....guess what like all criminals...they dont care about laws. So they will tumble the coins and make them disappear.
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1599 posts
Posted on 5/14/21 at 10:00 am to
quote:

Well I’d like to think that America doesn’t give in to demands and does our own thing, not pay hackers to get access to our own shite.


There are thousands of these in the US every year. Since you seem like a smart guy. What would you propose a business does instead of paying the ransom? Would love to watch you logic this out.
Posted by I B Freeman
Member since Oct 2009
27843 posts
Posted on 5/14/21 at 10:00 am to
Aren’t we glad they took action to get back up quicker?

Years ago we were the victim of ransom ware. We paid them $400 in Bitcoin and they gave us the program to reverse the renaming of the files they had hacked. Hated to pay it but we would have been out of business for weeks had we not.

We now have at least two backups of our server all the time.
This post was edited on 5/14/21 at 10:02 am
Posted by lockthevaught
Member since Jan 2013
2694 posts
Posted on 5/14/21 at 10:05 am to
quote:

It’s cheaper to pay the ransom than rebuild and reconfigure IT infrastructure.


Not in the long run. Essential industries like this need to invest in better backup infrastructure and have more redundant systems. Most likely the attackers still have unequivocal access to Colonial Pipeline's network and planted numerous backdoors.

This can be easily prevented by having VM backups replicated to an off site server room with extra VM snapshots stored on off site encrypted SAN storage arrays.
Posted by Misnomer
Member since Apr 2020
3667 posts
Posted on 5/14/21 at 10:06 am to
Posted by Icansee4miles
Trolling the Tickfaw
Member since Jan 2007
31776 posts
Posted on 5/14/21 at 10:07 am to
The FBI is fully occupied using all the agency’s resources still trying to dig up dirt on OMB. They can’t be bothered with such piddling things as national security.
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1599 posts
Posted on 5/14/21 at 10:08 am to
quote:

Not in the long run. Essential industries like this need to invest in better backup infrastructure and have more redundant systems. Most likely the attackers still have unequivocal access to Colonial Pipeline's network and planted numerous backdoors.



You're assuming victims pay the ransom then continue business as usual. I guarantee you they will be making changes to their IT infrastructure and still came out ahead money-wise versus starting from scratch.
This post was edited on 5/14/21 at 10:09 am
Posted by TheFritz
Member since Oct 2017
300 posts
Posted on 5/14/21 at 10:11 am to
Why are you so personally offended by this? It's a private company that sells you gas. They should pay the ransom and then plug the leak. Maybe coulda had to time to try and fix it without paying if retards didn't try and buy up all the gas.
Posted by Grievous Angel
Tuscaloosa, AL
Member since Dec 2008
10684 posts
Posted on 5/14/21 at 10:12 am to
quote:

Not in the long run. Essential industries like this need to invest in better backup infrastructure and have more redundant systems. Most likely the attackers still have unequivocal access to Colonial Pipeline's network and planted numerous backdoors.

This can be easily prevented by having VM backups replicated to an off site server room with extra VM snapshots stored on off site encrypted SAN storage arrays.


I have heard that my company has a plan for this, and they will pay if it happens. It's too expensive and catastrophic to stay offline.

We also spend a fortune to prevent that from happening. The pipeline might have been like most businesses and was a soft target. They just learned a 5 million dollar lesson and will do all the things you just outlined.

Posted by Mingo Was His NameO
Brooklyn
Member since Mar 2016
36367 posts
Posted on 5/14/21 at 10:13 am to
quote:

Well I’d like to think that America doesn’t give in to demands and does our own thing, not pay hackers to get access to our own shite.


You can believe whatever you want or you can live in reality
Posted by JohnnyKilroy
Cajun Navy Vice Admiral
Member since Oct 2012
40149 posts
Posted on 5/14/21 at 10:23 am to
quote:

Well I’d like to think that America doesn’t give in to demands and does our own thing, not pay hackers to get access to our own shite.



You’re pretty out of the loop. Also I take it you don’t own a business.
Posted by NawlinsTiger9
Where the mongooses roam
Member since Jan 2009
38353 posts
Posted on 5/14/21 at 10:30 am to
I feel like the hackers asked for 5 million thinking they would never actually get paid

Seems really low considering all the other elements involved
Posted by Fat Batman
Gotham City, NJ
Member since Oct 2019
1599 posts
Posted on 5/14/21 at 10:51 am to
quote:

I feel like the hackers asked for 5 million thinking they would never actually get paid


They likely settled on 5mil, which was probably substantially less than the initial ask.
first pageprev pagePage 3 of 7Next pagelast page

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on X, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookXInstagram