Understanding Response Risk Relative to Ransomware and DoT Guidelines
summary
October 2020 Treasury guidance warns that payments to ransomware operators risk civil enforcement, citing four designated groups (CryptoLocker, SamSam, WannaCry 2.0, Dridex) and a strict liability standard for transactions with sanctioned actors. Guidance targets intermediaries—forensic firms, insurers and banks—so many will refuse facilitation, pushing victims to involve FBI early (mitigating factor) or pay without help. No evidence yet that designations shrink ransomware overall; speakers urge better backups, crypto tracking and legal creativity (copyrighting emails) as next steps.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 17:03Paying the ransom
- 24:15Impact of sanctions
- 27:30Ransomware extortion
- 29:48Silver linings
- 32:43Conclusion
- 33:53Lessons for Business
- 35:59Final Thoughts
related talks
46mNegotiating with Terrorists: The High Stakes Game of Ransomware Response
57mRansom Demand? 10 Reasons to Think Before Paying
40mA Review of the Ransomware Threat Landscape
40mRansomware Threat Landscape
52mWhat Will it Take to Stop Ransomware?
37mRansomware Resilience: Holistic Defense for SOC Leaders
48mRansomware: From the Boardroom to the Situation Room
29mPrevention as a Business Strategy