zlacker

>>Strang+(OP)
Isn't it illegal in many countries to pay a ransom?

(If not, why not?)

(Imho, it would make sense if only the state can pay ransoms)

>>ameliu+Gj
Typically, companies wouldn't really pay an actual ransom like unmarked bills stacked in a paper bag and thrown out from a bridge onto a passing barge.

Instead, you would pay (exhorbitant) consulting fees to a foreign-based "offensive security" entity, and most of the time get some sort of security report that says if you'd simply plug this and that holes, your systems would now be reasonably safe.

>>vntok+yl
> Typically, companies wouldn't really pay an actual ransom like unmarked bills stacked in a paper bag and thrown out from a bridge onto a passing barge.

Yes, that's why cryptocurrencies are a gift from heaven for these hacker groups.

Therefore, even if paying ransom money (somehow) must be legal, maybe it should be illegal to use crypto for it. You don't want to make it too easy to run this type of criminal business.