Warren Drafts "Zakon o razkritju odkupnine", ker se napadi odkupne programske opreme povečujejo

Dva ameriška uradnika sta predlagala nov zakon, ki je namenjen žrtvam in hekerjem, vpletenim v napade izsiljevalske programske opreme, sredi vse večjega števila primerov. 

The legislation proposes victims of ransomware attacks in the U.S. file an incident report within 48 hours of payment. Senator Elizabeth Warren and House Representative Deborah Ross proposed the bill titled ‘Ransom Disclosure Act’.

Officials in the United States have had their eye on ransomware-related attacks with the increase in incidents in recent years. According to data from sonicwall, a cybersecurity firm, ransomware attacks worldwide saw a 62% increase. In North America alone, they increased by 158%. Additionally, the firm called 2020 the “perfect storm” for such attacks, as the shift to digital increased as a result of the Pandemija COVID-19. 

One of the biggest ransomware incidents occurred in May 2021, when the Kolonialni cevovod suffered a $5 million attack.  The hacker group DarkSide solicited the ransom in crypto, of which the U.S. DOJ recovered more than half. Nonetheless, the increase in incidents privlači a regulatory crackdown. Representative Ross, one of the bill’s authors, praksa incident v Tweetu, potem ko se je račun pojavil na spletu. 

»Napadi izsiljevalske programske opreme resno ogrožajo ljudi v Severni Karolini in širše. Videli smo, kako škodljivi so lahko v kibernetskem napadu Colonial Pipeline. Zato sem z @SenWarren uvedel zakonodajo, da bi okrepil naše razumevanje in načine obravnavanja plačil za odkupno programsko opremo. "

Bolstering Online Varnost

Predlog zakona podpira prizadevanja Ministrstva za domovinsko varnost (DHS) pri razumevanju funkcionalnosti združb kibernetskih kriminalcev in boljših praks kibernetske varnosti. 

V Izjava on both of the lawmaker’s spletne strani, the Ransom Disclosure Act contains four main components. 

• Žrtve napadov odkupne programske opreme (razen posameznikov) morajo v 48 urah po plačilu sporočiti podatke o plačilih. To vključuje znesek, ki ga zahteva heker, in plačani znesek, skupaj z vrsto valute. Poleg tega morajo žrtve vključiti vse znane podatke o hekerju. 
• DHS bi objavil podatke iz prejšnjega leta, ne da bi razkril identiteto žrtve. 
• DHS mora ustvariti spletno stran za poročila o odkupnih dogodkih. 
• Nazadnje bi moral DHS opraviti študijo o prekrivanju lastnosti napadov odkupne programske opreme. To mora vključevati obseg napadov, povezanih s kripto, skupaj s priporočili za večjo kibernetsko varnost. 

Prior to the proposed bill, the Zakladnica ZDA said it is preparing new sanctions against hackers and digital currencies as ransomware payments. Moreover, on September 22, 2021, the Treasury sanctioned the crypto exchange Suex for an affiliation with ransomware laundering. 

Aside from this new ransomware bill, other crypto related bills are under review from U.S. lawmakers. Most notably the industry rattling tax infrastructure bill, along with a bill which tracks foreign crypto mining.  

Kaj menite o tej temi? Pišite nam in nam povejte!