.. “They are running normally and their ransomware operations are pretty much back in full swing,” Holden said. “The are not slowing down because they still have a great deal of stolen data.”
Holden added that since news of the disruption first broke a week ago, the Russian-speaking cybercriminals behind Trickbot have been discussing how to recoup their losses, and have been toying with the idea of massively increasing the amount of money demanded from future ransomware victims.
“There is a conversation happening in the back channels,” Holden said. “Normally, they will ask for [a ransom amount] that is something like 10 percent of the victim company’s annual revenues. Now, some of the guys involved are talking about increasing that to 100 percent or 150 percent.”
[Edit to Ammend Source Link based on https://news.ycombinator.com/item?id=24756681. Please refer to https://krebsonsecurity.com/2020/10/report-u-s-cyber-command...]
[Original Link] Report: U.S. Cyber Command Behind Trickbot Tricks https://nmap.online/news/2020/report-us-cyber-command-behind...