[20210702]IN11698_司法部打击勒索软件的努力.pdf

CRS INSIGHT Prepared for Members and Committees of Congress INSIGHTINSIGHTi i Department of Justice Efforts to Counter Ransomware July 2, 2021 Ransomware attacks, such as the one carried out by DarkSide against Colonial Pipeline in May 2021 that disrupted pipeline operations, have highlighted federal law enforcement efforts to counter cybercriminals and their use of malicious technology. Ransomware Ransomware is malware that targets systems and data for the purpose of extortion. It is used against individuals, businesses, and government networks, locking users out of their systems or data and demanding a ransom payment to supposedly regain access to or prevent exposure of systems or data. There is no guarantee users will get their data back, even if they pay, or that their data or systems will not have been otherwise compromised. Reportedly, cybercriminals have increasingly used a Ransomware-as-a-Service (RaaS) model wherein certain criminals develop the malware and then sell or lease the tool to others to carry out ransomware campaigns. Both the developer and attacker then receive portions of the criminal proceeds. RaaS was involved in the attack on Colonial Pipeline. DOJs Role in