Slashdot Mirror


Fortune 500 Company Hires Ransomware Gang To Hack the Competition (vice.com)

It's no secret that ransomware hackers are in the business to make money. But a new business arrangement hitting the news today may surprise many. Vice's Motherboard, citing research and investigation (PDF) from security firm F-Secure, is reporting that a Fortune 500 company, the name of which hasn't been unveiled, hired a ransomware gang to hack its competitors. From the article: In an exchange with a security researcher pretending to be a victim, one ransomware agent claimed they were working for a Fortune 500 company. "We are hired by [a] corporation to cyber disrupt day-to-day business of their competition," the customer support agent of a ransomware known as Jigsaw said, according to a new report by security firm F-Secure. "The purpose was just to lock files to delay a corporation's production time to allow our clients to introduce a similar product into the market first."In a statement to Motherboard, Mikko Hypponen said, "If this indeed was a case where ransomware was used on purpose to disrupt a competitor's operation, it's the only case we know of." F-Secure adds that the consumer representative noted that "politicians, governments, husbands, wives -- people from all walks of life contract [them] to hack computers, cell phones."

65 comments

  1. Wow by Anonymous Coward · · Score: 0

    if they help fortune 500 companies stay rich, their methods will be legalized soon. The people involved will get a presidential pardon, and ransomware will be a normal method of fight amongst the corporations that rule this world.

    All hail the united corporations of america! All hail mammon!

    1. Re:Wow by __aaclcg7560 · · Score: 3, Interesting

      if they help fortune 500 companies stay rich, their methods will be legalized soon.

      During the robber baron days, it was common for the corporations to hire mercenaries and thugs to wage battles with workers and strikers. Murder, mayhem and riots were so routine that the government had to dispatch the military. That activity got outlawed. Internet warfare between corporations will get outlawed in time.

    2. Re:Wow by Dishevel · · Score: 2

      Is it your current thinking that hiring hackers to attack your competition is currently legal?
      If so, you are wrong.

      --
      Why is it so hard to only have politicians for a few years, then have them go away?
    3. Re:Wow by __aaclcg7560 · · Score: 2

      Is it your current thinking that hiring hackers to attack your competition is currently legal?
      If so, you are wrong.

      Murder, mayhem and riots aren't legal. Not then, not now.

    4. Re:Wow by Darinbob · · Score: 2

      This is an intrusion into the free market!!

    5. Re:Wow by Locke2005 · · Score: 1

      Murder, mayhem and riots aren't legal. Not then, not now.

      That's what makes them so much FUN!!!

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
    6. Re:Wow by thegarbz · · Score: 1

      Mercenaries? Hell didn't the Dutch East India Trading Co have its own army?

    7. Re:Wow by Anonymous Coward · · Score: 0

      These kinds of acts continue to this day. Look at Soros and his funded gangs of violent protesters and rioters.

    8. Re:Wow by Agripa · · Score: 1

      Murder, mayhem and riots aren't legal. Not then, not now.

      Exactly, they just declined to prosecute.

      Oh, and it also is not unlawful if the government does it.

  2. Re:LOL LIKE IP BAN WILL STOP ME by Anonymous Coward · · Score: 0

    Plus, it makes torrenting files so much safer!

  3. Consider the source by GrumpySteen · · Score: 5, Insightful

    Someone working with a ransomware scammer might not be the most trustworthy source of information.

    1. Re:Consider the source by fustakrakich · · Score: 1

      Either way, what about the story seems so implausible? Recent history should indicate that they could do much worse, like hire hitmen, or start wars. The sociopath is today's dominant "species" in this trade.

      --
      “He’s not deformed, he’s just drunk!”
    2. Re:Consider the source by Locke2005 · · Score: 3, Interesting

      Sociopaths make better CEOs. I believe that has been proven by research. Actually, Forbes thinks psychopaths make better CEOs: http://www.forbes.com/sites/je... I would have just said sociopaths, myself.

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
    3. Re:Consider the source by GrumpySteen · · Score: 1

      Either way, what about the story seems so implausible?

      The part where someone working in customer support claimed to have knowledge about confidential deals that their management was making, for one.

      And the phrasing, too. "We've been hired for jobs by a very important company. We can't tell you which one, but trust us... you are impressed." Yeah, sure.

    4. Re:Consider the source by Anonymous Coward · · Score: 0

      When you study the research you'll find that sociopaths, occupational psychopaths and narcissistsy destroy companies by destroying the productivity, innovations and capacity of the employees around them. The gains are illusitory because whilst they have an enormous ego they destroy moral in their quest to make themselves look good. Any financial damage they do to the company is someone elses fault in their mind.

      A CEO maybe an asshole or driven however a social dis-order of the ones you describe is a handicap whose consequences manifest by the damage and confusion they cause other people. They are toxic and if you meet one they will damage you, even if they are a subordinate, run.

  4. Re:LOL LIKE IP BAN WILL STOP ME by Anonymous Coward · · Score: 0

    "Slashdot doesn't condone piracy"? Well, they actually support it, and make money with it. This is called hippocracy!

  5. And nobody will be punished... by sconeu · · Score: 5, Insightful

    Assuming this is true...

    What should happen is that the "genius" who thought this up should be convicted and sent to prison for 30 years (or whatever they threatened Aaron Swartz with), for breaking the CFAA.

    What actually will happen is that $BIGCORP will get a trivial slap-on-the-wrist fine.

    --
    General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    1. Re:And nobody will be punished... by geek · · Score: 3, Insightful

      Assuming this is true...

      What should happen is that the "genius" who thought this up should be convicted and sent to prison for 30 years (or whatever they threatened Aaron Swartz with), for breaking the CFAA.

      What actually will happen is that $BIGCORP will get a trivial slap-on-the-wrist fine.

      Punished for what? The article doesn't even describe a single attack, let alone a victim or perpetrator. This is like someone in high school saying "My cousins best friends brothers girlfriend heard that someone down the street smoked a joint 6 months ago"

    2. Re:And nobody will be punished... by sconeu · · Score: 1

      What part of "assuming this is true" were you having a problem understanding?

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
  6. Fake by Anonymous Coward · · Score: 0

    I call fake on this. F-Secure hasn't put out any good research for years now. Putting out this crap based on hear-say and "you should believe me because I work for a security company" is just a lame attempt of getting more media attention. Everything from that report can be forged.

  7. Re:LOL LIKE IP BAN WILL STOP ME by Anonymous Coward · · Score: 0

    Whipslash is a very bad boy. Very bad indeed. He'll get no candy tonight.

  8. Serious, if proven true by ITRambo · · Score: 1

    If evidence exists that this event happened, the corporation that directed the attack needs to have all of their top executive imprisoned. The business world is fucked up enough as it is.

    1. Re:Serious, if proven true by JustAnotherOldGuy · · Score: 3, Insightful

      If evidence exists that this event happened, the corporation that directed the attack needs to have all of their top executive imprisoned.

      Either that, or they'll be punished with a huge bonus and limos stocked with underage hookers and blow.

      Guess which one is more likely to happen.

      --
      Just cruising through this digital world at 33 1/3 rpm...
    2. Re:Serious, if proven true by Anonymous Coward · · Score: 0

      No, just no.

      All people at the company should be rounded up and shot. Or gassed, if that is cheaper.
      Any why need any evidence? Screw 'em, they are a company, and something bad happened in the world.
      Even further, we should do this to all companies, because one bad thing should never be allowed to happen.
      Death to all who aren't perfect!

      Idiot.

      (captcha: autopsy)

    3. Re:Serious, if proven true by Locke2005 · · Score: 1

      Hey, hey hey! Have some decency here! At least make sure the hookers are of age! (Don't you just _hate_ the inexperienced ones?)

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
    4. Re:Serious, if proven true by JustAnotherOldGuy · · Score: 1

      At least make sure the hookers are of age! (Don't you just _hate_ the inexperienced ones?)

      Based on prior events my attorney has advised me to remain silent on the subject of underage hookers.

      --
      Just cruising through this digital world at 33 1/3 rpm...
    5. Re:Serious, if proven true by Anonymous Coward · · Score: 0

      You assume the underaged ones are inexperienced ...

  9. Right. by Black+Parrot · · Score: 1

    $SCARYRUMOR

    p.s. - Buy our security product.

    --
    Sheesh, evil *and* a jerk. -- Jade
  10. Reminds me of a guy I talked to... by Zibodiz · · Score: 3, Funny

    There was a customer who walked into my shop to get his iPhone 4s fixed a month or so ago. While he was waiting, we made small talk, and he bragged about his pickup truck. He told me that it has a 'chip' that makes it produce 900HP. He used to have a 1000HP chip, but his grandfather saw him spinning his tires, so he told him to take it out.
    The truck was a rusty, 20-year-old Dodge, with a V8 that produces about 240HP from the factory.

    Did I smile and nod, occasionally saying 'Wow'? Of course. Did I believe him? Not in the least.

    This also reminds me of a story from one of the Gawker blogs, where a writer interviewed taxi drivers. The question she asked was: "Have you ever been propositioned by a passenger?" Most said "No", a couple said "Once", and one guy claimed that it happened every night, and that he had women falling all over him.
    The part of this story that makes it a little unbelievable is the range of customers he claimed to have. 'Husbands and wives'; do they have a website where we can go and order some hacking? If not, how are these average citizens finding them? 'Governments'? I should expect that most interested governments would instead invest into their own cyber-military, rather than hiring a 2-bit scammer. This just doesn't smell right.

    1. Re:Reminds me of a guy I talked to... by cdrudge · · Score: 1

      He told me that it has a 'chip' that makes it produce 900HP. He used to have a 1000HP chip, but his grandfather saw him spinning his tires, so he told him to take it out.
      The truck was a rusty, 20-year-old Dodge, with a V8 that produces about 240HP from the factory.

      The engine produces 240HP. He has 4 wheels (or more specifically, 4 sets of brakes) That's 960 brake horsepower! You just didn't understand how these technical specs are measured.

    2. Re:Reminds me of a guy I talked to... by Zibodiz · · Score: 1

      Wow, suddenly it all makes sense!

      Seriously though, thanks for the laugh.

    3. Re:Reminds me of a guy I talked to... by Anonymous Coward · · Score: 0

      ...This also reminds me of a story from one of the Gawker blogs, where a writer interviewed taxi drivers. The question she asked was: "Have you ever been propositioned by a passenger?" Most said "No", a couple said "Once", and one guy claimed that it happened every night, and that he had women falling all over him...

      I was a television repair man back in the 70s. I heard all kind of stories about getting propositions from women especially "take it in trade" for paying repair bill. Never even came close to happening to me for the five (5) years I did house calls. So yea that and the Taxi driver thing is probably urban myth status...

  11. Shadowrun by Anonymous Coward · · Score: 1

    This is what my tabletop gaming group's current Shadowrun job is. Granted, it's much more involved in the game because the objective is ensure that a live product demo fails spectacularly so that the corporation gets no new clients and goes to a competitor (our employer) instead, but the spirit of the run is essentially the same.
     
    Each day we inch closer to the fictional cyberpunk dystopia of yesterday.

    1. Re:Shadowrun by Fire_Wraith · · Score: 5, Funny

      I keep thinking that we seem to be inching closer and closer to Shadowrun... but I'm still waiting for the elves, orcs, and the magic to start popping up. Nevermind a dragon running for president.

    2. Re:Shadowrun by Actually,+I+do+RTFA · · Score: 2

      Nevermind a dragon running for president.

      The Donald isn't close enough for you?

      --
      Your ad here. Ask me how!
    3. Re:Shadowrun by Agripa · · Score: 1

      Shadowrun? More like Paranoia.

  12. Please change this headline... by Nermal · · Score: 2

    ...to "Super-sketchy slimeball makes vague, unsubstantiated claim of having been hired by a Fortune 500 company".

    Motherboard's headline at least acknowledges that all it's reporting is "ransomware gang claims that...", and the other report cited by the post says
    """
    F-Secure’s security advisor Sean Sullivan doesn’t think the story sounds plausible. “It’s probably a young gun, just trying to make a hundred bucks. 95% chance he’s spinning a yarn,”
    """

    I'm not saying it can't be true, but seriously, but why does /.'s headline upgrade crooks to people whose statements should be taken at face value?

    1. Re:Please change this headline... by Anonymous Coward · · Score: 0

      I'm not saying it can't be true, but seriously, but why does /.'s headline upgrade crooks to people whose statements should be taken at face value?

      That question answers itself.

      Crooks need people to take them at face value to keep reeling in fools.
      Slashdot "editors" need people to take them at face value to keep reeling in the eyes.

      Draw your conclusions.

    2. Re:Please change this headline... by Locke2005 · · Score: 1

      Hey, it's not like super-sketchy slimeballs have any incentive to LIE for financial gain, right?

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
  13. If Proven.. by Anonymous Coward · · Score: 0

    .. another reason for having the corporate death penalty (dissolution of the corporate charter).

    1. Re:If Proven.. by Locke2005 · · Score: 2

      Nationalize the company and give all the assets to the IRS in the event of proven unlawful activity? Sounds good. Because it's not a person, a corporation doesn't have the right to due process. At least that's the theory behind civil forfeiture, right? The property committed the crime, and it must be punished by being confiscated! And, no trial is required, because property doesn't have any rights... so why do corporations have rights, again?

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
  14. And we all believe this BS ? Yeah, right ... by nomad63 · · Score: 2

    I take Hypponen as a credible security expert but I thing he went to the deep end to keep his name in the news. First off, if this fortune 500 company is not one of the new inductees to the list from mainland China or some equivalent 3rd world country, I do not believe, they would risk anything like that. Right behind that reasoning, I can see the cryptolocker pirates wanting to make a name for themselves and announce that they are doing this on behalf of this or that corporation. It sure gives them some clout but at the end, it is just their BS. Nothing more. Unless Hypponen has a smoking gun and wants to come out and let the world know this is actually the case, I will keep my skeptic hat on.

    --

    __________
    The more I know people, the more I love animals
    1. Re:And we all believe this BS ? Yeah, right ... by liquid_schwartz · · Score: 1

      ... First off, if this fortune 500 company is not one of the new inductees to the list from mainland China or some equivalent 3rd world country, I do not believe, they would risk anything like that.

      To be fair there have been *many* major scandals by major companies that in hindsight seem spectacularly foolish. The most recent example is probably VW but FIFA getting charged under RICO, Olympic commission being so openly bribed that Rio & Sochi were deemed good sites for games, accounting scandals too numerous to name. Remember that Enron was at one time a fortune 500 company. I'd say that large organizations do dumb things all the time.

    2. Re:And we all believe this BS ? Yeah, right ... by dbIII · · Score: 1

      Probably complete bullshit this time but remember that Enron got up to all kinds of immoral shit not that long ago. Being a "fortune 500 company" in the US does not always mean acting in a way where it's going to be on that list in more than the short term.

  15. Surprise?! No way man! by fustakrakich · · Score: 1

    You taking us for suckers, or what?

    --
    “He’s not deformed, he’s just drunk!”
  16. VP's CEO's need to due hardtime and not hide under by Joe_Dragon · · Score: 1

    VP's CEO's need to due hard time and not hide under a system of contractors / sub contractors / independent contractors / staffing firms. Where they can pass the blame but control them them like they are there W2 pay roll.

  17. Re:LOL LIKE IP BAN WILL STOP ME by Darinbob · · Score: 2

    Hippocracy? Doesn't that mean a government run by horses?

  18. Re:VP's CEO's need to due hardtime and not hide un by fustakrakich · · Score: 2

    On the contrary. Civil asset forfeiture, as evil as it is, would have a much greater effect. In fact, this is exactly the kind of thing it is supposed to be used for. Tattooing "I am a thief" on their foreheads would be a nice supplementary measure to make sure that nobody forgets. Let's save the prison space for the button men and truly violent people who present a real danger to the public.

    --
    “He’s not deformed, he’s just drunk!”
  19. Obvious question by Locke2005 · · Score: 1

    Isn't that illegal? Meaning, wouldn't getting caught hiring people to commit computer trespass have penalties far greater than what could be gained by successfully hacking your competitors?

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
    1. Re:Obvious question by sconeu · · Score: 1

      Silly Locke2005. Penalties are for the little people.

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    2. Re: Obvious question by Anonymous Coward · · Score: 0

      Go to your closest prison and ask the inmates if they ever done something illegal.

  20. Re:What about hillary? by myowntrueself · · Score: 2

    The Zionist/Rothchild controlled FBI would never allow her to be convicted

    So you are saying that the Mormons are controlled by Zionists/Rothschilds?

    OMFG

    http://www.moneyteachers.org/R...

    Its on the Internet so it must be true!

    --
    In the free world the media isn't government run; the government is media run.
  21. Re:VP's CEO's need to due hardtime and not hide un by myowntrueself · · Score: 2

    On the contrary. Civil asset forfeiture, as evil as it is, would have a much greater effect. In fact, this is exactly the kind of thing it is supposed to be used for. Tattooing "I am a thief" on their foreheads would be a nice supplementary measure to make sure that nobody forgets. Let's save the prison space for the button men and truly violent people who present a real danger to the public.

    Most cops seem to think civil asset forfeiture is for taking small change from out of town folks driving through in their cars!

    --
    In the free world the media isn't government run; the government is media run.
  22. Surprised it took so long by KhawarNehal523 · · Score: 1

    For decades security and IT consultants have been asked by their clients about possibilities of attacking the competition. I am just surprised it took so long before they found a bunch of crackers to actually do it at a level where it became news. Regards, Khawar Nehal http://atrc.net.pk/

  23. Re:VP's CEO's need to due hardtime and not hide un by Anonymous Coward · · Score: 1

    Only if we can tattoo "I am a collaborator" on the democrats.

    This is offtopic, but I wanted to respond, so I have to post AC for the obvious reason.

  24. Re:LOL LIKE IP BAN WILL STOP ME by D00MSlayer · · Score: 1

    I'd like to think it's a government run by Hippos. Because why not?

  25. h4xx t3h pl4n3t by Anonymous Coward · · Score: 0

    Idiots being idiots inspired by idiot reporters with their idiot "reporting".

  26. Re:LOL LIKE IP BAN WILL STOP ME by Anonymous Coward · · Score: 0

    Apk's really taken a piece of your troll hides with reprehensible tactics like yours now quite clearly showing he's totalled you before.

  27. Re:VP's CEO's need to due hardtime and not hide un by Agripa · · Score: 1

    Most cops seem to think civil asset forfeiture is for taking small change from out of town folks driving through in their cars!

    And most politicians. And most judges. And most lawyers. And both parties.

    The only people who do not support civil assets forfeiture do not matter.