The White House held the third annual Counter Ransomware Initiative (CRI), convening 50 entities – 48 countries, the European Union, and Interpol – to discuss combating ransomware. During this year’s summit, members were focused on:
- Developing capabilities to disrupt attackers and their infrastructure
- Improving cybersecurity through information-sharing and
- Fighting back against ransomware actors.
Out of the summit, there were a few notable deliverables. The first being that nearly all of the governments signed a pledge against paying ransoms to hackers. As the first-ever collective statement of this kind, it signaled a powerful unified front denying cybercriminals the incentives they seek to persist and profit from their attacks.
Albeit inspiring, officials have publicly noted that the pledge is not binding, raising questions on the effectiveness of the commitment. With the way that the agreement is written, it doesn’t lead to a ban, includes carve-outs for emergencies and still gives governments room to decide on a case-by-case basis whether a ransom payment is warranted.
Additionally, the U.S. Department of the Treasury published a "blacklist" containing details on cryptocurrency wallets implicated in previous ransom transfers. The idea behind this is to use artificial intelligence to analyze blockchains, potentially halting transactions originating from flagged wallets.
Finally, the CRI also led to additional information sharing capabilities by Lithuania, Israel and the United Arab Emirates that will enable member countries to quickly exchange news of threat indicators.
There is no doubt that ransomware is a cross-border, transnational threat that demands international collaboration. As the coalition of countries work to expand their influence, potential projects in the future may include formalizing CRI processes by determining governance frameworks, exploring how partnerships with the cyber insurance industry can help in countering ransomware, and how countries should work together with AI and other emerging technologies. To learn more about this year’s summit and its outcomes, click here.
Read Next
The U.S. and UN Cybercrime Convention: Progress, Concerns, and Uncertain Commitments
The U.S. issued an updated position seeking to move forward the UN Convention Against Cybercrime, a treaty intended to improve the global community’s ability to combat evolving cybercrime threats.
The Counter Ransomware Initiative with Hamish Hansford (DCP S2 E8)
In the latest Distilling Cyber Policy, Alex Botting and Jen Ellis are joined by our second-ever Australian guest: Hamish Hansford, the Deputy Secretary of Cyber and Infrastructure Security Group at the Australian Department of Home Affairs.
Counter Ransomware Initiative Adds Private Sector Members
Earlier this month, more than 68 countries and organization members met for the fourth annual International Counter Ransomware Initiative (CRI), which included the addition of a public-private advisory panel.
