News: 1634191091

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

US invites friends to multilateral cybersecurity meetings – Russia and China strangely absent

(2021/10/14)


The United States has kicked off meetings attended by representatives of nations that all hope to address the scourge of ransomware – without Russia or China in the room.

An expression of the US National Security Council’s Counter-Ransomware Initiative, the two-day meetings will occupy Wednesday and Thursday.

"The initiative builds on President Biden's leadership to rally allies and partners to counter the shared threat of ransomware," [1]said a senior administration official about the two-day virtual meeting of ministers and senior officials from over 30 countries and the EU.

[2]

China and Russia aren't at the event. Both were name-checked in a pre-event press call as a source of recent cybermalice and, as such, not welcome during talks about a solution.

[3]

[4]

Eager to address the elephant in the room – or rather the bears not allowed in the room – media on the pre-event call repeatedly pressed the un-named Biden rep regarding the absence of China and Russia. It was made clear that the US engages separately and directly with Russia on the issue of ransomware, and Russia's future attendance in such engagements was not ruled out.

"The headline, folks, should really be around US government leading and bringing countries together to fight ransomware effectively," said the official, who later conceded that Russia was not invited, rather than simply unavailable to attend the party.

[5]

"Russia plays a role because of a number of criminal actors who are, you know, operating from Russia. And that is the reason that President Biden established with his counterpart – with President Putin – a dedicated channel for us to have very focused and candid discussions. And that's why I noted to you that we've had several and they continue," spake the senior administration official.

[6]Uncle Sam recovers 63.7 of 75 Bitcoins Colonial Pipeline paid to ransomware crew

[7]Ransomware-skewered meat producer JBS confesses to paying $11m for its freedom

[8]NCSC chief: Ransomware is more of a threat to Britain than hostile nations' spies

[9]Biden to Putin: Get your ransomware gangs under control and don’t you dare cyber-attack our infrastructure

The meeting's agenda includes efforts to improve national resilience, addressing the misuse of virtual currency to launder ransom payments, efforts to disrupt and prosecute ransomware criminals, and diplomacy as a tool to counter ransomware. Only the first of six sessions were open to the press — the rest are closed in order to encourage "frank, open dialogue". Just not too open.

While the US is facilitating the meeting, the efforts are collaborative among nations, as India will lead and organize talks on resilience, Australia on disruption, UK on virtual currency and Germany on diplomacy.

"We know very well – all of us who have gathered here today – that we cannot do this alone," [10]said national security advisor Jake Sullivan during opening remarks on Zoom. He described cybersecurity as an urgent threat prioritized by the US, whose agencies are "pursuing an integrated effort to disrupt the ransomware ecosystem". ®

Get our [11]Tech Resources



[1] https://www.whitehouse.gov/briefing-room/press-briefings/2021/10/13/background-press-call-on-the-virtual-counter-ransomware-initiative-meeting/

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YWf-7IvjiDIhydvhPyuWMwAAAIM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YWf-7IvjiDIhydvhPyuWMwAAAIM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YWf-7IvjiDIhydvhPyuWMwAAAIM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YWf-7IvjiDIhydvhPyuWMwAAAIM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[6] https://www.theregister.com/2021/06/08/antiransomware_task_force/

[7] https://www.theregister.com/2021/06/10/jbs_foods_pays_ransom/

[8] https://www.theregister.com/2021/06/15/ncsc_chief_rusi_speech/

[9] https://www.theregister.com/2021/06/17/biden_putin_summit_cybersecurity_discussion/

[10] https://www.washingtonpost.com/politics/2021/10/13/today-ransomware-summit-is-about-international-cooperation/?utm_medium=social&utm_source=twitter&utm_campaign=wp_main

[11] https://whitepapers.theregister.com/



RSVP

Fruit and Nutcase

Did the French accept the invitation? Or are they still in a huff about AUKUS and the subs?

Anonymous Coward

Hackers planning meetup.

Germany right? It's Germany behind the P* papers: Panama Papers, Paradise Papers, Pandora Papers?

... and they're not "whistleblowers" clearly, they're hacks. Pandora papers for example, 15 financial companies, in 11 nations hacked, that could not possibly be a whistleblower. Since all these hacks all fit the same mould, then none of them were likely "whistleblowers" regardless of how they were marketed, they will all be hacks.

German press always takes the leads, Süddeutsche Zeitung reports first, then the ICIJ (that 'wikileaks' organization, that never gets investigated). All the same aliterative marketing crap: "Peter Picked a Peck of Pickled Pepper Papers". All lead with targets selected to be German opposition targets (inc Tony Blair this time). I think its clearly a *state* run cyber-attack, and most likely a German run one.

I notice also, the lack of investigation into these hacks. So it's not like they don't know who is behind it, it's clearly one of their own, and clearly a high tax nation given the focus is on attacking low tax nations. Germany fits that pattern too.

So who next I wonder?

My guess, Hungary, 9% corporation tax. Andora 10% corporation tax. Macau 12% corp tax and cooperates with China, Saudi Arabia (no income tax), Spain (Beckham tax rule).

Here's a planning list:

https://en.wikipedia.org/wiki/List_of_countries_by_tax_rates

Click on Sort-up to find possible next targets, and Sort-down, to find likely State attacker.

Anonymous Coward

It's funny isn't it.

They claim hacking laws are for 'anti-terror' or 'organized-crime' and they end up trying to influence elections in friendly nations with their hacks, run propganda in friendly countries, undermine democracy with selective releasing of minor financial transactions weaponized with inuendo and vague allegations.

Or perhaps I'm wrong, and this latest hack will get investigated, and perhaps a grand jury raised against ICIJ the way it was raised against Wikileaks.

I won't hold my breath.

The Elephantine Opportunity in the Room is Well Forearmed and Forewarns .....

amanfromMars 1

Immaculately Resourced Assets and Universal Virtual Forces haven't gone away, you know. They are the AIMorph that Resides to Preside and Provide ...... although there may certainly be many who would waste their breath trying to deny those facts are real and honestly true, rather more preferring them to be fake and misleading ....... [1]https://forums.theregister.com/forum/all/2021/10/11/data_guardian_police_bill/#c_4348970

Does the SinoSoviet East [as embodied in their identification as Russia and China] lead the Wild West [as portrayed as a Five Eyed Alliance of NATO nations] with a much more NEUKlearer HyperRadioProACTive IT Realisation of the Phenomenon?

[1] https://forums.theregister.com/forum/all/2021/10/11/data_guardian_police_bill/#c_4348970

That'll work well then

batfink

Yup, let's have a conference on addressing ransomware without inviting those countries we've just fingered as hosting the most ransomware gangs.

That should work well then.

Gotta hand it to them

_LC_

You gotta hand it to them, the audacity of a falling empire is really staggering.

They are there "in spirit"

sanmigueelbeer

Russia, China, North Korea and Iran may not have been invited, however, who said they did not hear (or see) everything?

Windows: The first user interface where you click Start to turn it off.

-- From a Slashdot.org post