The DOJ can prioritize ransomware cases and coordination across its existing task force, putting the Colonial Pipeline attack in a national-security enforcement frame.
Colonial Pipeline becomes the immediate reference point for a higher-level federal response to ransomware affecting critical infrastructure.
Second-order effects
Key infrastructure operators face greater pressure to report attacks promptly as lawmakers' reporting proposal gains urgency alongside the DOJ's enforcement escalation.
The FBI's broad ransomware caseload, including attacks it said often traced to Russia, becomes more consequential as DOJ treats the threat as a terrorism-level priority.
Third-order effects
If reporting mandates and the elevated investigative posture persist, ransomware response shifts from company-by-company incident handling toward a standing critical-infrastructure security function shared by operators and federal agencies.
This is a positive indication that we're getting serious about stopping ransomware. Much more needs to be done, but directional shifts are a good thing. https://www.reuters.com/...
Hot take: if the scope of this policy change is limited to USDOJ, it won't be enough to solve the problem. FBI already cares a lot. Prioritizing the prosecution of foreign nationals located in non-extradition countries is not going to be meaningful. https://twitter.com/...
Good move by @TheJusticeDept to centralize data reporting about ransomware attacks, which pose a significant threat to national security. Coordinated response will help identify perpetrators who are targeting multiple victims around the country. https://www.reuters.com/...
To those saying that we're not invading Moldova and that the country has nothing to do with ransomware... remember that we kinda spitballed it with Iraq, too https://www.reuters.com/...
Live streams go down across Cox radio & TV stations in apparent ransomware attack https://therecord.media/... UF Health Florida hospitals back to pen and paper after cyberattack https://www.bleepingcomputer.com/ ... US 2 give ransomware hacks similar priority as terrorism https:/…
We've known RW actors have been sheltered by the Russian government for years. This isn't new attribution? I guess just a matter of it finally affecting people who donate to re-election campaigns. Certainly didn't matter when it was hospitals or schools. https://twitter.com/...
“We really want to make sure prosecutors and criminal investigators report and are tracking ... cryptocurrency exchanges, illicit online forums or marketplaces where people are selling hacking tools” https://www.reuters.com/...
An internal guidance sent around the country on Thursday to U.S. attorney's offices from DOJ - reviewed by Reuters — prioritizes prosecutions in ransomware cases and requires coordinated/central reporting. https://www.reuters.com/...
US to give ransomware hacks similar priority as terrorism. What it means: investigators in US attorney's offices handling ransomware attacks need to share case details and active tech information with leaders in Washington. https://www.reuters.com/...