Senators Try to Get Tough On Rise in Cybercrime
WASHINGTON — A group of U.S. senators responded Thursday to recent ransomware attacks by introducing legislation to impose new tactics and harsh penalties on cyberattackers.
They pinned much of the blame on Russia, despite denials a day earlier by Russian President Vladimir Putin.
“The Russians do know about it,” said Sen. Richard Blumenthal, D-Conn., during a Capitol Hill press conference.
He said the legislation, called the International Cybercrime Prevention Act, would demonstrate to Putin that the consequences for cyberattacks “go both ways.”
The senators discussed the Colonial Pipeline and JBS S.A. ransomware attacks as prime examples of why new legislation is needed.
On May 7, Colonial Pipeline Co. ‘s system that carries gasoline and jet fuel from Houston to Southeastern states was shut down by a ransomware attack traced to a criminal gang in Russia. The company paid a $4.4 million ransom, much of which was recovered by the FBI. The pipeline resumed operations on May 12.
In the JBS case, a ransomware attack shut down the meat processing company’s operations in the United States and Australia from May 30 to June 2. JBS paid the Russian hackers an $11 million ransom in Bitcoin.
The senators also mentioned the 2020 SolarWinds attack as a motivation for striking back with new authorizations for the Justice Department.
SolarWinds was a major cyberattack traced to a group backed by the Russian government. It penetrated computers from thousands of organizations worldwide, including U.S. government agencies.
In essence, the International Cybercrime Prevention Act would extend law enforcement tactics typically used against organized crime to cyberattackers, even if they are foreign-based. It is designed primarily to protect critical infrastructure, such as dams, power plants, hospitals and election systems.
Until now, prosecutors were largely limited to obtaining injunctions against persons believed to be involved in cybercrime. The new Senate bill would authorize broader surveillance of potential hackers.
It would allow the Justice Department to seize the kind of spyware and equipment used by cybercriminals to identify and attack victims.
It also would impose tough penalties against persons who help them, even if they are not themselves the hackers.
Although the bill does not specifically mention counterattacks by the U.S. government, senators who spoke at the press conference left a clear impression they were coming.
“This law goes after the criminal syndicates but we also have to go after the host country,” said Sen. Lindsey Graham, R-S.C.
He said that if private companies that operate infrastructure are unable to protect their networks, the federal government would help them.
“Clearly the private sector has not done its job,” Graham said.
He acknowledged that until now, the U.S. government might also have overlooked its responsibilities.
“In 2021, the Department of Defense does not have a definition for a cyberattack against the United States,” Graham said.
Although the senators gave no details of potential U.S. counterattacks, President Joe Biden told the media he is weighing options.
In addition, Defense Secretary Lloyd Austin said in a CNN interview last month that the United States has the “capability to conduct offensive operations” but he did not explain the strategy.
Putin said during a summit meeting with Biden Wednesday that he does not want a return to the Cold War. However, he added during a press conference, “Most of the cyberattacks in the world are carried out from the cyber realm of the United States.”
In The News
WASHINGTON — The Atlantic Council outlined Tuesday how the U.S. government and businesses can work together to protect the nation’s... Read More
WASHINGTON — The Atlantic Council outlined Tuesday how the U.S. government and businesses can work together to protect the nation’s power grid from cyberattacks. The United States’ power grid is increasingly reliant on digital technology and the internet. This is especially true as the country moves... Read More
HOOVER, Ala. — As the National Computer Forensics Institute comes up for congressional reauthorization, forensics and cybersecurity experts told The... Read More
HOOVER, Ala. — As the National Computer Forensics Institute comes up for congressional reauthorization, forensics and cybersecurity experts told The Well News how the institute’s standardized curriculum is critical to contemporary law enforcement activities. Having a centralized hub for preparing police for handling incidents related to... Read More
WASHINGTON — The entity charged with protecting federal agencies from bad cyber actors issued a rare emergency directive Thursday, warning... Read More
WASHINGTON — The entity charged with protecting federal agencies from bad cyber actors issued a rare emergency directive Thursday, warning they should quickly take steps to protect themselves from vulnerabilities found in VMware. VMware is a cloud computing and virtualization technology company headquartered in Palo Alto,... Read More
WASHINGTON — The Department of Justice can now get a handle on the number of cybercrimes happening in the U.S.... Read More
WASHINGTON — The Department of Justice can now get a handle on the number of cybercrimes happening in the U.S. after President Joe Biden signed a bill into law Thursday granting the department the ability to track crimes that have become increasingly prevalent in recent years.... Read More
WASHINGTON — Lawmakers at a Senate hearing renewed warnings Wednesday that Russian cyberattacks remain a serious threat as the United... Read More
WASHINGTON — Lawmakers at a Senate hearing renewed warnings Wednesday that Russian cyberattacks remain a serious threat as the United States and allies continue their support for Ukraine. In the latest move, the European Union announced Tuesday it would end all oil imports from Russia in... Read More
WASHINGTON — The FBI is warning that computer hackers most likely based in Russia have compromised at least 60 organizations... Read More
WASHINGTON — The FBI is warning that computer hackers most likely based in Russia have compromised at least 60 organizations since last month with a new generation of a sophisticated programming language. The targets of the ransomware attacks have included a Swiss airport management company and... Read More