At the beginning of May, a U.S. pipeline company suffered a ransomware attack. The company halted operations for several days, causing a spike in gas prices and localized fuel shortages. It also decided to meet the threat actors’ demands of $5 million, an ask emblematic of the rising costs of ransomware.

The U.S. Department of Justice (DOJ) is taking action in the wake of that attack, among others. As reported by Reuters, DOJ investigators will now begin looking into ransomware attacks with the same level of priority as they do with terrorism.

Read on to learn how this decision might affect the DOJ’s investigations into ransomware going forward.

A ‘Specialized Process’

On June 3, 2021, Reuters reported internal guidance sent within the DOJ and among U.S. attorneys’ offices. A new task force in Washington will now be responsible for centrally coordinating information about ransomware investigations.

John Carlin, DOJ’s principal associate deputy attorney general, said the U.S. government will now tackle the ransomware threat more holistically.

“It’s a specialized process to ensure we track all ransomware cases regardless of where it may be referred in this country, so you can make the connections between actors and work your way up to disrupt the whole chain,” he said.

To do that, the DOJ will expect U.S. attorneys’ offices to share ransomware case details and other technical information with leaders in Washington on an ongoing basis.

U.S. attorney investigators will also look into other instances of digital crime, including botnets and online money laundering services.

“We’ve used this model around terrorism before, but never with ransomware,” Carlin pointed out.

Over 100 Ransomware Strains Under FBI Scrutiny

A day after Reuters’ report, FBI Director Christopher Wray provided an update into the Bureau’s anti-efforts. The FBI will approach the ransomware threat as it did the challenges posed by the 9/11 terrorist attacks, he said.

“There are a lot of parallels; there’s a lot of importance and a lot of focus by us on disruption and prevention,” Wray told The Wall Street Journal. “There’s a shared responsibility, not just across government agencies but across the private sector and even the average American.”

Wray went on to reveal that the FBI is currently tracking over 100 different ransomware strains. Many of those trace back to gangs in Russia, he clarified.

How to Defend Against a Ransomware Attack

The DOJ’s shift in approach highlights the need for businesses and agencies to consider this a serious threat. Towards this end, organizations can follow best practices laid out by The White House, such as testing their incident response plans often. Doing so will help them to find gaps in their defenses.

Organizations should also consider segmenting their networks. This measure is essential for preventing an infection from affecting enterprise assets more widely. With network segmentation, data backup can be used to restore the affected segment — all while preserving at least some of their business functions.

If you have experienced a ransomware attack and would like immediate assistance from IBM Security X-Force incident response, please call our hotline at 1-888-241-9812 (US) or +001-312-212-8034 (Global). Learn more about X-Force’s threat intelligence and incident response services.

More from News

HHS Releases Hospital Cyber Resiliency Landscape Analysis

4 min read - On April 17, 2023, The U.S. Department of Health and Human Services (HHS) 405(d) Program announced the release of its Hospital Cyber Resiliency Initiative Landscape Analysis. This landmark analysis reports on domestic hospitals’ current state of cybersecurity preparedness. The scope of the HHS study was limited to activities that protect access to patient care and safety and reduce the negative impact of cyber threats on clinical operations. Breaches of sensitive data were considered only if the breach had a direct…

4 min read

Zombie APIs are a Top Security Concern as API Attacks Surge 400%

4 min read - Organizations of all sizes rely on application programming interfaces (APIs). The API explosion has been driven by several factors, including cloud computing, demand for mobile/web applications, microservices architecture and the API economy as a business model. APIs enable developers to access data remotely, integrate with other services, build modular applications and monetize their data/services. For enterprises that participated in a recent research study, the average number of APIs per organization was 15,564. Large enterprises (over 10,000 employees) had an average…

4 min read

Google’s Bug Bounty Hits $12 Million: What About the Risks?

4 min read - Bug bounty numbers have never been better. In 2022, Google rewarded the efforts of over 700 researchers from 68 different countries who helped improve the security of the company’s products and services. The total amount of awards grew from $8.7 million paid in 2021 to $12 million in 2022, a nearly 38% increase. Over the past few years, bug bounty programs have gained significant traction. Companies have been lured in by the potential to identify vulnerabilities quickly, enhance product security…

4 min read

Swiss Army Knife Malware Slices Through Systems In so Many Ways

4 min read - What if one single malware strain could cut through any security that tried to stop it? In a new study of more than 550,000 live malware strains, the Picus Red Report 2023 has unveiled a trove of over 5 million malicious activities. In the report, researchers identified the top tactics utilized by cyber criminals in 2022. Picus' findings also highlighted the growing prevalence of "Swiss Army knife malware". This type of malicious software is capable of executing a range of…

4 min read