In ransomware fight, US government, industry join forces: Report

The United States government and industry officials confronting an epidemic of ransomware attacks are zeroing in on cryptocurrency regulation as the key to combating the scourge, sources familiar with the work of a public-private task force tells the Reuters news agency.

In a ransomware attack, hackers freeze the computers of a target and demand a payoff.

In a report on Thursday, the panel of experts is expected to call for a far more aggressive tracking of Bitcoin and other cryptocurrencies. While those have won greater acceptance among investors over the past year, they remain the lifeblood of ransomware operators and other criminals who face little risk of prosecution in much of the world.

Ransomware gangs collected almost $350m last year, up threefold from 2019, two members of the task force wrote this week. Companies, government agencies, hospitals and school systems are among the victims of ransomware groups, some of which US officials say have friendly relations with nation-states including North Korea and Russia.

“There’s a lot more that can be done to constrain the abuse of these pretty amazing technologies,” said Philip Reiner, the chief executive of the Institute for Security and Technology, who led the Ransomware Task Force. He declined to comment on the report before its release.

Just a week ago, the US Department of Justice established a government group on ransomware. Central bank regulators and financial crime investigators worldwide are also debating if and how cryptocurrencies should be regulated.

Anonymous no more?

The new rules proposed by the public-private panel, some of which would need congressional action, are mostly aimed at piercing the anonymity of cryptocurrency transactions, the sources said. If implemented, they could temper enthusiasm among those who see the cryptocurrencies as a refuge from national monetary policies and government oversight of individuals’ financial activities, having surged past $1 trillion in total capitalisation.

The task force included representatives from the FBI and the US Secret Service as well as key technology and security companies. It will recommend steps such as extending “know-your-customer” regulations to currency exchanges; imposing tougher licencing requirements for those processing cryptocurrencies; and extending money-laundering rules to facilities such as kiosks for converting currency.

It also calls for the creation of a special team of experts within the Department of Justice to facilitate seizures of cryptocurrency, a process currently fraught with logistical and legal challenges.

Some of the ideas echo those proposed by the Financial Crimes Enforcement Network, which would expand disclosure rules for transactions worth more than $10,000.

Federal investigators said a proposal to register accounts would be especially helpful for identifying drug smugglers, human traffickers and people it deems “terrorists” as well as ransomware groups.

“That would be huge,” said a senior Homeland Security official, who spoke on condition of anonymity to discuss these emerging policy proposals. “This is a world that was created exactly to be anonymous but at some point, you have to give up something to make sure everyone’s safe.”

International cooperation

Governments are already using the blockchain ledger that documents all Bitcoin transactions to bring some charges. Last week, authorities arrested a man in Los Angeles and accused him of laundering more than $300m through a service that combines transactions from multiple cryptocurrency wallets to obscure who is paying whom.

Records from the US Marshals Service show that more than $150m in cryptocurrency assets were seized last year and offered to the public at auction. Last week, the Marshals Service signed a $4.5m deal with BitGo, a California-based exchange, to hold and sell more forfeited cryptocurrency.

But many of the exchanges, which conduct the critical operation of turning cryptocurrency into dollars or other widely accepted currencies, are in countries outside the reach of US regulators.

The Institute for Security and Technology’s Reiner said that international cooperation will be critical and that pressure could be brought by allies with similar regulations.

“However much crypto markets think they have created their own networks, they still rely on existing financial markets,” Reiner said.