{"id":22834,"date":"2022-02-01T13:30:34","date_gmt":"2022-02-01T18:30:34","guid":{"rendered":"https:\/\/abovethelaw.com\/?p=829831"},"modified":"2022-02-01T13:30:34","modified_gmt":"2022-02-01T18:30:34","slug":"taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms","status":"publish","type":"post","link":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/","title":{"rendered":"Taking The Fight To The Ransomware Gangs: The Impact On Law Firms"},"content":{"rendered":"

\"\"Ed. note<\/u>: This is the latest in a new article series, Cybersecurity: Tips From the Trenches<\/strong>,<\/em> by our friends at Sensei Enterprises<\/a>, a boutique provider of IT, cybersecurity, and digital forensics services.<\/em><\/p>\n

Going on the Offensive: A New Development in Combatting Ransomware<\/strong>
\nFor as long as ransomware gangs have been around, we\u2019ve been rocked back on our heels in defensive mode. No longer. Following the old adage about taking the fight to the enemy, we have set out to make it painful to be in a ransomware gang. We have taken the gloves off in our quest to disrupt the cyber criminals.<\/p>\n

Who is Fighting Ransomware?<\/strong>
\nEveryone knew that, under the Biden administration, cybersecurity was a priority \u2013 one of the few things that both political parties could agree upon. Notable has been the elevation of the Cybersecurity and Infrastructure Security Agency (CISA), which is part of the Department of Homeland Security. CISA has risen to great prominence producing all sorts of resources, one of them noteworthy for this article. The resource is Stop Ransomware, a site full of helpful advice in plain English found here<\/a>.<\/p>\n

But what we didn\u2019t know until December of 2021 was that the U.S. military is taking on ransomware as well, particularly worried about attacks on critical infrastructure. Mind you, the military doesn\u2019t want to tell us exactly what it is doing which is unsurprising. General Paul M. Nakasone, the head of the US Cyber Command and director of the National Security Agency, has said that one of the goals of the current operations is to \u201cimpose costs\u201d for ransomware groups.<\/p>\n

We have also added private companies to the fight, including Amazon, Google and Microsoft. CISA is teaming with private companies in the Joint Cyber Defense Collaborative, which will focus first on combatting ransomware and attacks on cloud providers \u2013 concurrently working on information sharing between the government and the private sector.<\/p>\n

The Department of Justice Had a Very Good Month in November 2021<\/strong>
\nIn a series of moves, the DOJ sent ransomware gangs a strong message. It arrested an affiliate of the ransomware gang REvil <\/a>in Poland to be extradited to the U.S.<\/p>\n

It seized $6.1 million in cryptocurrency from another REvil associate.<\/p>\n

Finally, it offered a bounty of $10 million for the name or location of any key REvil leader and up to $5 million for information about REvil affiliates. That\u2019s some serious money!<\/p>\n

January 2022: The Russians Say They Shut Down REvil with Information Provided by the U.S.<\/strong>
\nEyebrows no doubt went up everywhere when that news was reported. The Federal Security Service (FSB) of the Russian Federation announced that REvil was now shut down and \u201cthe information infrastructures used for criminal purposes was neutralized.\u201d<\/p>\n

Fourteen REvil members were arrested, apparently based on information provided by the U.S. Russian authorities confiscated cryptocurrency and fiat money, including more than 426 million rubles (approximately $5.5 million), 600 thousand U.S. dollars and 500 thousand euros (approximately $570,000).<\/p>\n

They also confiscated 20 luxury cars purchased with money obtained from cyberattacks, computer equipment and cryptocurrency wallets used to develop and maintain the ransomware operation.<\/p>\n

Chatter on the Dark Web: The Criminals are Worried<\/strong>
\nNot surprisingly, members of ransomware gangs are worried about being tracked down and arrested. They expressed in their dark web chatter that they had no desire to go to jail (imagine that). Previously, jail had never seemed a possibility as Russia turned a blind eye to the activities of ransomware gangs.<\/p>\n

Some mentioned moving out of Russia. Others worried that criminals who are arrested will rat out their comrades. That seems likely. Suddenly, there was a ripple of fear pervading in the ransomware cartels that didn\u2019t exist before. Crime may indeed have consequences.<\/p>\n

What Do Recent Developments Portend for the Longstanding Battle of Law Firms Against Ransomware?<\/strong>
\nIt is hard to know this early on how law firms may be impacted by the recent victory against REvil. Bear in mind that the Russian cooperation may have much to do with diplomacy. It may have been a good moment to give the Americans something they wanted (Russia doing something about the many ransomware gangs it harbors) while plans to attack Ukraine were clearly underway.<\/p>\n

Also, a new ransomware group has popped up called the \u201cRansom Cartel.\u201d DataBreachToday reported on January 24 that \u201cSecurity experts say the new group has technical and other crossovers with REvil. But whether the new group is a spinoff of REvil, bought the tools, or is simply copying how they work, remains unclear.\u201d As we have always said, shutting down ransomware gangs amounts to playing a game of \u201cwhack-a-mole.\u201d<\/p>\n

Law firms are still being attacked every day. We know that because of what we do for a living. But the actions we\u2019ve seen taken in the U.S. are significant \u2013 and over time, they may have their intended effect, disrupting the gangs through arrests, siphoning their cryptocurrency, etc. The clear advice for law firms is \u201cdon\u2019t let your guard down.\u201d<\/p>\n

Law firms are still, as Forbes once noted, a great \u201cone stop shopping\u201d way to get the data of many corporations, government entities, etc. They remain the crown jewel prize for ransomware gangs, so while we applaud the commendable actions taken thus far, the war against ransomware is far from over. In many ways, it has just begun.<\/p>\n

\n

Sharon D. Nelson (snelson@senseient.com) is a practicing attorney and the president of Sensei Enterprises, Inc. She is a past president of the Virginia State Bar, the Fairfax Bar Association, and the Fairfax Law Foundation. She is a co-author of 18 books published by the ABA.
\n
\nJohn W. Simek (jsimek@senseient.com) is vice president of Sensei Enterprises, Inc. He is a Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), and a nationally known expert in the area of digital forensics. He and Sharon provide legal technology, cybersecurity, and digital forensics services from their Fairfax, Virginia firm.
\n
\nMichael C. Maschke (mmaschke@senseient.com) is the CEO\/Director of Cybersecurity and Digital Forensics of Sensei Enterprises, Inc. He is an EnCase Certified Examiner, a Certified Computer Examiner (CCE #744), a Certified Ethical Hacker, and an AccessData Certified Examiner. He is also a Certified Information Systems Security Professional. <\/em><\/em><\/em><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

We have taken the gloves off in our quest to disrupt the cyber criminals.<\/p>\n","protected":false},"author":86,"featured_media":731171,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[11],"tags":[344,3033,915,9850,9853,7],"class_list":["post-22834","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-cyber-attacks","tag-cybersecruity","tag-ransomware","tag-revil","tag-sensei","tag-technology"],"acf":[],"yoast_head":"\nTaking The Fight To The Ransomware Gangs: The Impact On Law Firms - Above The Law's Legal Tech Non-Event<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Taking The Fight To The Ransomware Gangs: The Impact On Law Firms - Above The Law's Legal Tech Non-Event\" \/>\n<meta property=\"og:description\" content=\"We have taken the gloves off in our quest to disrupt the cyber criminals.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/\" \/>\n<meta property=\"og:site_name\" content=\"Above The Law's Legal Tech Non-Event\" \/>\n<meta property=\"article:published_time\" content=\"2022-02-01T18:30:34+00:00\" \/>\n<meta name=\"author\" content=\"Brian Dalton\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brian Dalton\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/\",\"url\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/\",\"name\":\"Taking The Fight To The Ransomware Gangs: The Impact On Law Firms - Above The Law's Legal Tech Non-Event\",\"isPartOf\":{\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2022-02-01T18:30:34+00:00\",\"dateModified\":\"2022-02-01T18:30:34+00:00\",\"author\":{\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/#\/schema\/person\/c90ecdd660543c781c8f923b49840db7\"},\"breadcrumb\":{\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Taking The Fight To The Ransomware Gangs: The Impact On Law Firms\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/#website\",\"url\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/\",\"name\":\"Above The Law's Legal Tech Non-Event\",\"description\":\"A Legal Tech Adoption Guide For Perplexed Lawyers\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/#\/schema\/person\/c90ecdd660543c781c8f923b49840db7\",\"name\":\"Brian Dalton\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/173e997e634d3703349d56132b2f05d9a1282b8e0b3e43a7d4342025ddfcc15b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/173e997e634d3703349d56132b2f05d9a1282b8e0b3e43a7d4342025ddfcc15b?s=96&d=mm&r=g\",\"caption\":\"Brian Dalton\"},\"description\":\"Brian is a graduate of Middlebury College and Fordham Law. He joined Breaking Media in October 2011 after spending seven years at Vault.com, most recently as Director of Research and Consulting. Before that, he was, among other things, an associate at a Manhattan law firm, a French teacher in Brooklyn, a Peace Corps volunteer in Mali, and a security guard at a waterslide park in Albuquerque, NM.\",\"sameAs\":[\"http:\/\/breakingmedia.com\"],\"url\":\"https:\/\/abovethelaw.com\/legal-innovation-center\/author\/brian-dalton\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Taking The Fight To The Ransomware Gangs: The Impact On Law Firms - Above The Law's Legal Tech Non-Event","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/","og_locale":"en_US","og_type":"article","og_title":"Taking The Fight To The Ransomware Gangs: The Impact On Law Firms - Above The Law's Legal Tech Non-Event","og_description":"We have taken the gloves off in our quest to disrupt the cyber criminals.","og_url":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/","og_site_name":"Above The Law's Legal Tech Non-Event","article_published_time":"2022-02-01T18:30:34+00:00","author":"Brian Dalton","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Brian Dalton","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/","url":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/","name":"Taking The Fight To The Ransomware Gangs: The Impact On Law Firms - Above The Law's Legal Tech Non-Event","isPartOf":{"@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/#website"},"primaryImageOfPage":{"@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#primaryimage"},"image":{"@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#primaryimage"},"thumbnailUrl":"","datePublished":"2022-02-01T18:30:34+00:00","dateModified":"2022-02-01T18:30:34+00:00","author":{"@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/#\/schema\/person\/c90ecdd660543c781c8f923b49840db7"},"breadcrumb":{"@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/2022\/02\/01\/taking-the-fight-to-the-ransomware-gangs-the-impact-on-law-firms\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/abovethelaw.com\/legal-innovation-center\/"},{"@type":"ListItem","position":2,"name":"Taking The Fight To The Ransomware Gangs: The Impact On Law Firms"}]},{"@type":"WebSite","@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/#website","url":"https:\/\/abovethelaw.com\/legal-innovation-center\/","name":"Above The Law's Legal Tech Non-Event","description":"A Legal Tech Adoption Guide For Perplexed Lawyers","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/abovethelaw.com\/legal-innovation-center\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/#\/schema\/person\/c90ecdd660543c781c8f923b49840db7","name":"Brian Dalton","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/abovethelaw.com\/legal-innovation-center\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/173e997e634d3703349d56132b2f05d9a1282b8e0b3e43a7d4342025ddfcc15b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/173e997e634d3703349d56132b2f05d9a1282b8e0b3e43a7d4342025ddfcc15b?s=96&d=mm&r=g","caption":"Brian Dalton"},"description":"Brian is a graduate of Middlebury College and Fordham Law. He joined Breaking Media in October 2011 after spending seven years at Vault.com, most recently as Director of Research and Consulting. Before that, he was, among other things, an associate at a Manhattan law firm, a French teacher in Brooklyn, a Peace Corps volunteer in Mali, and a security guard at a waterslide park in Albuquerque, NM.","sameAs":["http:\/\/breakingmedia.com"],"url":"https:\/\/abovethelaw.com\/legal-innovation-center\/author\/brian-dalton\/"}]}},"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/abovethelaw.com\/legal-innovation-center\/wp-json\/wp\/v2\/posts\/22834","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/abovethelaw.com\/legal-innovation-center\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/abovethelaw.com\/legal-innovation-center\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/abovethelaw.com\/legal-innovation-center\/wp-json\/wp\/v2\/users\/86"}],"replies":[{"embeddable":true,"href":"https:\/\/abovethelaw.com\/legal-innovation-center\/wp-json\/wp\/v2\/comments?post=22834"}],"version-history":[{"count":0,"href":"https:\/\/abovethelaw.com\/legal-innovation-center\/wp-json\/wp\/v2\/posts\/22834\/revisions"}],"wp:attachment":[{"href":"https:\/\/abovethelaw.com\/legal-innovation-center\/wp-json\/wp\/v2\/media?parent=22834"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/abovethelaw.com\/legal-innovation-center\/wp-json\/wp\/v2\/categories?post=22834"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/abovethelaw.com\/legal-innovation-center\/wp-json\/wp\/v2\/tags?post=22834"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}