Cybersecurity

30 readers

3 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Rules

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

founded 2 years ago

MODERATORS

shellsharks@fedia.io

tweedge@fedia.io

Australia - the first country in the world to make it mandatory for organisations to declare to the government if a ransomware payment is made on their behalf to cyber extortionists (infosec.pub)

submitted 2 months ago by gcluley@mastodon.green to c/cybersecurity@fedia.io

2 comments fedilink hide all child comments

Australia - the first country in the world to make it mandatory for organisations to declare to the government if a ransomware payment is made on their behalf to cyber extortionists

Reports will have to be made to the ASD within 72 hours

What do you think? Good idea? Would you like a similar mandatory approach in your country?

More details on which businesses the law applies to, and penalties, can be found at https://therecord.media/australia-ransomware-victims-must-report-payments

#cybersecurity #ransomware

top 2 comments

sorted by: hot top controversial new old

[–] samueljohnson@mstdn.social 2 points 2 months ago

@gcluley@mastodon.green Seems like a good idea. I can think of several upsides.

[–] bontchev@infosec.exchange 1 points 2 months ago

@gcluley@mastodon.green Good idea in principle, because the gathered data will give us a much better picture of the severity of the problem. I have two worries, though:

Will adequate measures be taken to preserve the anonymity of the victims?
Might this not be just a first step towards banning ransom payments - something I am strongly opposed to?