I-COMMENTARY
Uhulumeni wase-US uhlanganisa imizamo yokunqanda ukuphazamiseka okwandayo isishayo sokuhlaselwa kwe-ransomware. Isibonelo, uMnyango Wezwe muva nje unikele ngemali engafika ku-$15 million ukuze uthole ulwazi I-LockBit, kanye nezigidi eziyishumi zamaRandi ukuze uthole ulwazi mayelana ne I-BlackCat/ALPHV or Hive izigelekeqe ze-ransomware.
Lapho lezi zinzuzo zingase zisebenze kahle kakhulu isekunxenxeni abaqhubi ukuthi “bakhiphe” abadlali abasabisayo abayizimbangi, noma abasebenzisana nabo abangeneme ukuze baziphindiselele uma bekhohliswa ukuze bathole isihlengo. Kodwa-ke, izimo okudingeka kuhlangatshezwane nazo ukuze kuqoqwe lezi zinzuzo ziqinile, futhi izinkokhelo zimelela ingxenye encane yabasebenzisi be-ransomware yemali engenayo kanye nozakwethu bayaqaphela, okushiya isisusa esincane sokubambisana neziphathimandla.
Ngakho-ke, ingabe uhulumeni wenza ngokwanele? Ingabe indlela yokuqinisa umthetho yobugebengu kulokhu kusongelwa izodala umonakalo ekuhlaselweni? Ingabe amazwe aphikisanayo asebenzisa leli thuba lendawo enkulu empunga eyisizinda sobugebengu bamakhompuyutha kanye nemisebenzi yezwe?
Ama-Ransomware Operators njengama-Nation-State Proxies
Siyazi amazwe akhohlakele njengeRussia asekela imisebenzi ye-ransomware, futhi ahlinzeka ngendawo ephephile yabahlaseli. Okwakamuva umbiko we-Chainalysis ihlole ukuthi u-74% wayo yonke imali engenayo engekho emthethweni ekhiqizwe ukuhlaselwa kwe-ransomware ngo-2021 iya kubahlaseli abaxhumene neRussia, ingxenye enkulu yemali yesihlengo.
Asikwazi ukwehlisa imvelo ekabili engaba khona kwabaningi banamuhla ukuhlaselwa kwe-ransomware. Kukhona ukunqwabelana okuningi phakathi kwezenzo zobugebengu bamakhompuyutha kanye nokusebenza kwezwe, njengoba kufakazelwa ngamathuluzi okwabelwana ngawo nengqalasizinda yokuhlasela. Ukusebenzisa amaqembu ezigebengu ze-ransomware njengama-proxies kunikeza ukuphikwa okuzwakalayo ezizweni ezifana ne-Russia, kuyilapho zisebenzisa isu elikhulu le-geopolitical.
Izizwe ezifana neRussia azinayo intshisekelo yokudedela izimpahla ezibalulekile kuziphathimandla zaseNtshonalanga. Ungavumeli "ukwehliswa" komgunyathi uhulumeni wase-Russia akutshele ukuthi kuwubuwula - kuyindaba nje yomphakathi, futhi akusenjalo.
Ukuqamba Okunye Ukuhlasela Kwe-Ransomware Njengobuphekula
Ukuhlaselwa kwe-Ransomware okuqondiswe kubahlinzeki bengqalasizinda ebalulekile njenge izinhlangano zezempilo beqe umugqa kusukela ezenzweni zobugebengu bamakhompuyutha baye engozini enkulu yokuphepha kwezwe. Akuseyona nje ukuqagela ukuthi ukuhlasela kwe-ransomware kusongela ukuphila.
Lapho abahlaseli bekude bephazamisa amasistimu abalulekile ekunakekelweni futhi babambe inqwaba yabahlinzeki bezempilo neziguli zabo ukuze bahlenge, sivele sikubize ngokuthi umcimbi wokuphepha we-IT futhi impendulo kahulumeni iwukunikeza imihlahlandlela eminingi nezinhlaka. Kodwa uma amakhulu oshayasibhamu abasebenzelana nezwe eliphikisanayo engena ezibhedlela eziningi futhi abambe izisebenzi neziguli, avimbele ukuphathwa kokunakekelwa izinsuku zilandelana, ingabe ukunikeza iziqondiso zesibhedlela zendlela yokuthola oshayasibhamu kungaba impendulo eyamukelekayo kuhulumeni?
A umbiko wakamuva kaPonemon ithole ukuxhumana okuqondile phakathi kokuhlaselwa kwe-ransomware kanye nemiphumela emibi yesiguli: Amaphesenti angu-68 abaphendulile ocwaningweni athi ukuhlaselwa kwe-ransomware kuphazamise ukunakekelwa kwesiguli; ama-46% aphawule amazinga okufa akhuphukayo; Ama-38% aphawule ezinye izinkinga ezinkambisweni zezokwelapha. Olunye ucwaningo bathole ukuthi phakathi kuka-2016 no-2021, ukuhlaselwa kwe-ransomware kube nomthelela ekufeni kweziguli eziphakathi kuka-42 nezingama-67, kanye nokwenyuka okumangazayo kwamazinga okufa okungama-33% ngenyanga ezigulini ezilaliswe esibhedlela i-Medicare. Impela likhona icala okufanele lenziwe ukuze kuqokwe okunye kwalokhu kuhlasela njengezenzo zobuphekula obusekelwa uhulumeni.
Abanye bangase baphikise ngokuthi ukuntuleka kwenhloso yezombangazwe eshiwo ngokucacile ngemuva kokusebenza kwe-ransomware kusho ukuthi, nakuba ukuhlaselwa kwesibhedlela okuphazamisa ukunakekelwa kwesiguli futhi okuholela emiphumeleni emibi kungachazwa njengokubangela ukwesaba, ngeke kuhlangabezane nencazelo yobuphekula.
Nokho, i-oda eliphezulu 13224, ekhishwe abaphathi baka-George W. Bush ngo-September 2001, asisekeli leso siphetho, futhi sibonakala sisebenza ngokusobala kwezinye izihlaselo ze-ransomware, njengalezo ezimelene nabahlinzeki bezempilo:
“Ngenhloso yoMyalelo, 'ubuphekula' buchazwa njengesenzo (1) esibandakanya isenzo sobudlova noma isenzo esiyingozi empilweni yomuntu, empahleni, noma nengqalasizinda; futhi (2) kubonakala kuhloselwe ukwesabisa noma ukuphoqelela umphakathi; ukuthonya inqubomgomo kahulumeni ngokwesabisa noma ngenkani.”
Umsebenzi wobugebengu be-Cybercriminal uwumgomo wokugcinwa komthetho. Baphenya, baqoqe ubufakazi bobugebengu, babeke icala, futhi bashushise uma kungenzeka. Kuze kube manje lokhu sekuholele ekuboshweni kwabambalwa, iningi labo okungabasolwa abasezingeni eliphansi. Kodwa uma sikhetha lokhu kuhlasela njengezinsongo ekuvikelekeni kwezwe, kunemithetho ehlukene yokuxhumana engadlulela ngalé kwezinsolo nje, futhi ingafaka izenzo ezihlaselayo ezithathwa njengezifanelekile futhi zilinganiselwe, kokubili i-cyber kanye ne-kinetic.
Iqiniso Elinzima: Izinkombandlela Nezinhlaka Akwanele
Izinhlangano eziyizisulu kanye nabangase babe izisulu zalokhu kuhlasela ziye zashiywa ukuba zilwe le mpi zodwa kuyilapho zithola kancane ukuvikeleka kuhulumeni. Ngaphandle kokuthi kuze kube yilapho i-US kanye nohulumeni abambisene benza lesi sinqumo, kunemiphumela embalwa yangempela yalaba badlali abasabisayo kuyilapho izinhlangano ezihlosiwe zisasele ukuba zizinakekele. Nakuba imihlahlandlela nezinhlaka ziwusizo, ziseyizindlela “zokuzenzela wena” ezisongela usongo olukhuphuka ngokusobala ezingeni lendaba yezokuphepha kazwelonke.
Sidinga ngaphezu kwezinhlelo zokusebenzelana nomphakathi zikahulumeni we-vanilla ukulwa nokuhlaselwa kwe-ransomware. Kubalulekile ukuthi uhulumeni wase-US kanye nezizwe ezihlangene okuyizona eziqondiswe kulokhu kuhlasela zihlukanise okungenani ingxenye yakho ngokuyihlukanisa njengezenzo zobuphekula ukuze sikwazi ukusebenzisa amathuluzi amasha kule mpi. Uma kungenjalo, kuzoba umgwaqo omude, oqinile, onesizungu olindele izisulu ze-ransomware.
- I-SEO Powered Content & PR Distribution. Khuliswa Namuhla.
- I-PlatoData.Network Vertical Generative Ai. Zinike Amandla. Finyelela Lapha.
- I-PlatoAiStream. I-Web3 Intelligence. Ulwazi Lukhulisiwe. Finyelela Lapha.
- I-PlatoESG. Ikhabhoni, I-CleanTech, Amandla, Environment, Ilanga, Ukuphathwa Kwemfucuza. Finyelela Lapha.
- I-PlatoHealth. I-Biotech kanye ne-Clinical Trials Intelligence. Finyelela Lapha.
- Source: https://www.darkreading.com/vulnerabilities-threats/frameworks-guidelines-bounties-alone-wont-defeat-ransomware
