Experts Discuss How Hackers Are Changing Media and Cyber Extortion Tactics

In this video, a panel of experts discusses how hackers are changing the media and the evolution of cyber extortion tactics. The panel includes Bob McMillan from the Wall Street Journal, Lorenzo Franceschi-Bicchierai from TechCrunch, and Sadia Mirza, a partner at Troutman Pepper, who represents victims of cyberattacks. Bob McMillan starts by explaining how hackers have always sought media attention, but in recent years, ransomware groups have professionalized their operations, creating brands and actively seeking media attention. Lorenzo Franceschi-Bicchierai shares his process of verifying information before publishing an article, emphasizing the importance of accuracy and transparency. Sadia Mirza, for her part, explains the challenges of responding to cybersecurity incidents, including the complexity of notifying data breaches and negotiating with cybercriminals. A key point of the discussion is how hackers manipulate the media to pressure their victims. Ransomware groups often threaten to disclose sensitive data to the media if victims do not pay the ransom. This tactic adds a layer of complexity to incident response, as victims must not only manage the breach itself but also the threat of public disclosure. Journalists and victims have different goals when communicating about a cyberattack. Journalists aim to inform the public quickly and accurately, while victims must ensure that all information is accurate before disclosing it. This difference in goals can sometimes create tensions, but the panel agrees on the importance of transparency and open communication. Lorenzo Franceschi-Bicchierai and Bob McMillan discuss their processes for verifying information and deciding whether to publish a story. They emphasize the importance of contacting the right people within victim organizations and giving them a fair chance to respond before publishing an article. Sadia Mirza adds that victims must also be prepared to communicate proactively with the media and prepare a communication plan from the outset of the incident. In conclusion, the panel agrees that transparency and open communication are essential for effectively managing cybersecurity incidents. Victims must be prepared to explain the challenges and complexities of incident response, while the media must ensure that published information is accurate and verified. This collaboration can help protect the public's interests while minimizing the impact of cyberattacks.