US Treasury says those who facilitate payments on behalf of ransomware victims, including digital forensics firms, face fines if recipients are under sanctions
Brian Krebs / Krebs on Security :
Krebs on Security Brian Krebs
Related Coverage
- View article infosecurity-magazine.com
- Security pros face sanctions if they help ransomware victims pay ComputerWeekly.com
- Treasury Department: Paying ransomware demands could be illegal SiliconANGLE
- Ransomware victims who pay up could face fines of up to $20m Finextra
- Companies Can Be Punished for Ransomware Payoffs: Treasury Decrypt
- CompTIA Research: Organizations' Cybersecurity Improves During COVID-19 Channel Futures
- Paying ransomware groups might violate US sanctions SC Media
- U.S. Treasury warns cyber insurers payments to hackers may violate sanctions Reuters
- Paying ransomware demands could land you in hot water with the feds Ars Technica
- View article Help Net Security
- US Treasury says some ransomware payments may need its express approval ZDNet
Discussion
-
@d1rtydan
Dan Okopnyi
on x
*company gets ransomeware* Execs: what have we lost? IT: everything.. Execs: what's everything? IT: every document and database we have.. the whole business Execs: no way to fix? IT: no Execs: pay the ransom *company pays ransom* Treasury department: *fines company* WTF https://t…
-
@briankrebs
@briankrebs
on x
In an advisory today, The Treasury Dept. warned that companies victimized by ransomware and those that facilitate ransom payments could face steep fines if they end up paying crooks who are already under economic sanctions https://krebsonsecurity.com/ ... https://twitter.com/...
-
@campuscodi
Catalin Cimpanu
on x
tl;dr: You need to notify the Treasury OFAC before making a payment, and they may deny it https://twitter.com/...