[techslave]

muy interensante.

we often theorize about / present a threat model of an insider becoming malicious in exactly this way. rare that we hear of it actually occurring.

the number used in such threat modeling scenarios is typically $1MM. maybe we need to up that to $4.5MM. (per TFA)

note the simplification in the headline: the $1MM was merely the insider’s share, not the proposed ransomware amount.

[joemazerino]

The CWT ransom was 4.5M. Strange considering the Russians are willing to give the attack method 25% of the (previous) take home.