During the last few days, a large number of ransomware attacks of different kinds have been made known. The Ragnar Locker ransomware made its way onto CWT's computer systems. This malware caused the encryption of all the data on the infected systems and demanded a ransom to rescue the data. To top it off, conversations with CWT, who have paid the ransom, have been disclosed by the crackers, owners of the ransomware.
The most curious thing about all this is that the ransom has been paid in Bitcoin, a fairly traceable cryptocurrency. While there are systems to obfuscate transactions, there are cryptocurrencies that are more suitable for anonymity. Bitcoin offers privacy, not anonymity, while Monero does offer anonymity in a simple way.
[irp posts=”81970″]Crackers filter their conversations with CWT, affected by a ransomware
Having a robust security system is very important. Above all, it is recommended not to click on suspicious or strange email links. It is also recommended not to download email files that may be suspected of being potentially harmful. But at the same time we need to have a good backup system.
But the craziest of all is that the crackers have leaked the conversations where the CWT is negotiated. The great naturalness of the conversations between the two parties is striking, even reaching a point of cordiality.
You can see in one of the captures how the attackers boast of having infected more than 30.000 CWT systems. To unlock the systems, they are asked for $ 10 million to be paid in bitcoins. These crackers also ensure that they will erase all the moments they have stolen from CWT. These crackers even tell you how to improve your security system so you don't suffer an attack of this type again.
The alleged CWT representative tells the hackers that the $ 10 million amount is excessive and asks for the promised price in the first message. Crackers respond that it is better to pay to expose private information on the network and thus lose reputation. But hey, the crackers indicate that if CWT pays soon they will give them a special price.
A negotiation between 'friends'
CWT or the supposed representative, indicates that the company is not having a good economic time due to the COVID pandemic. It offers crackers a reward of 3.7 million dollars instead of the 8 million requested. But the crackers are asking for $ 4 million immediately to get the software to clean the systems. The reato of the requested money will serve to erase the data that crackers store on their servers.
It seems that everything ends with a payment agreement of 4.5 million dollars in bitcoins by CWT. The payment would have finally been made by CWT, since a series of recommendations is sent to the company to improve the security of the company and avoid new incidents.
The most surreal of all is that both parties say goodbye cordially, as if they have closed a great legal agreement. Even the crackers praise the head of CWT for the great professionalism of the company. All nonsense.
Source: Reuters