Would you pay a cyber ransom?

Would you pay a cyber ransom?
Paige Fusco

A few days ago, cyber criminals hacked into one of the largest oil pipelines in the US, which halted operations after its corporate IT network was knocked offline. If the engineers don't fix the system on their own or the owners cough up the ransom that the hackers are demanding, millions of Americans will soon feel the heat of cybercrime in their daily lives, through higher prices at the gas pump.

Who pulled off this attack, and what does it tell us about the vulnerability of critical infrastructure and the rules (or lack thereof) in cyber conflict today?

The culprit. The US government has blamed the Colonial Pipeline cyberattack on DarkSide, a relatively new group of veteran hackers from Eastern Europe famous for bragging about its exploits online, and leaking data dumps from victims who don't pay up. The DarkSiders style themselves as Robin Hoods of the hacker world, donating (a minuscule) part of their profits to global NGOs such as Children International and The Water Project. But this time they may have bitten off a bit more than they can chew.

DarkSide issued on Monday a rare apology for creating "problems" to society, insisting they only want money and are not at all interested in politics, although they do seem to avoid former Soviet bloc nations. That's common for cyber criminals based in these countries, whose governments will look the other way as long as hackers target victims outside their borders.

One of those governments is that of Russia, with a long history of outsourcing its dirty cyber work to unscrupulous hackers. Joe Biden says there's no evidence that the Kremlin was involved this time, but does have "some responsibility."

The problem. The fact that a bunch of geeks armed with laptops shut down a pipeline that serves 45 percent of America's oil refineries shows that US critical infrastructure is a lot more vulnerable to cyber-extortion than we'd like to think. And the Biden administration's $2 trillion plan to upgrade US infrastructure across the board turns cybersecurity into an even more urgent concern.

As always, the pandemic has made everything worse. Ransomware attacks — and cybercrime in general — have boomed in COVID times, largely as a result of IT systems that became more vulnerable when companies rushed to adapt them for remote access. Moreover, hackers are now targeting bigger firms for a lot more money thanks to the rise of cryptocurrencies, which make it easier for them to get paid and harder to trace.

Ransomware attacks are particularly problematic for companies and countries because they are forced to make a tough choice: pay off hackers and risk encouraging further such attacks, or hold out and take the economic or social disruption on the chin.

The response. The Colonial Pipeline hack shows how cyberattacks can do severe damage to a country by disrupting critical infrastructure. But as we've written before, these types of operations are hard to prevent, and even harder to attribute and respond to.

So far, the US government has declared a state of emergency to keep the oil flowing to the Eastern Seaboard. But at this point it can't do much more to stop the hackers, or hold them responsible for a brazen attack that would otherwise be considered an act of war against America. It can't even prevent the corporation from paying the cryptocurrency ransom.

What it can do mostly depends on whether a foreign government was involved, or aware of what DarkSide was cooking. If that's confirmed later on, the US may want to hit that country harder than with the usual economic sanctions. There could even be political pressure to respond proportionately in cyberspace — perhaps with a similarly damaging attack. And when the cyber gloves are off, things could get very bad, very fast.

More from GZERO Media

NATO Summit: Most Important Summit Since the Wall Came Down | World In :60 | GZERO Media

What is the significance of Japan and South Korea's presence at the NATO summit? With China lowering its quarantine period, do they finally have control of COVID-19? Will new G7 sanctions on Russia be effective at stopping the war in Ukraine? Ian Bremmer shares his insights on global politics this week on World In :60.

How Long Can China's Zero-COVID Policy Last? | GZERO World

China's tough pandemic response likely saved a million deaths, but former CDC chief Tom Frieden believes the Chinese have two big problems now. First, their vaccines don't work, he tells Ian Bremmer on GZERO World. And second, hesitancy rates — especially among the elderly — remain high.

Mother and daughter outside the US Supreme Court.
REUTERS/Evelyn Hockstein

Roe v. Wade is dead, but the abortion debate in America lives on. Even before Roe’s reversal by the Supreme Court on Friday, access to surgical abortions had already been severely curtailed in many parts of the country. Medical abortions – a less invasive method that involves swallowing a pill – have become the new frontier in the battle over reproductive rights and access in America.

Paige Fusco

In little over 20 years, abortion pills have gone from being illegal to the most popular way for Americans to get abortions. But now that Roe v. Wade has been overturned, it's unclear whether or how US states that ban abortion will block access to medication abortions. We take a look at how abortion pill usage has progressed in recent decades.

Russia Losing In The West | Quick Take | GZERO Media

Ian Bremmer's Quick Take: It is summit week, particularly summit week as it involves the United States and core allies starting right now with the G7, began on Sunday in Germany, and then moving on to the Madrid Summit in Spain. Certainly the most important NATO summit that we've had in decades, but more broadly, this is the United States and advanced industrial democracies coming together in response to a major global crisis on the European continent.