[jstarfish]

> part of what makes a global internet hazardous is the it is fully connected in a graph theory sense.

Nah, the bigger problem is that you can reach victims, but the long arm of their law enforcement can't reach you.

You don't need OPSEC when you're judgment-proof. You can operate in plain sight since nobody can do anything to you.

[RajT88]

This. EuroPol/FBI have no jurisdiction in Pakistan. As long as they don't target victims in their own country, they are most likely able to act with impunity.

[mikeyouse]

Russia, China, and North Korea too -- at least two of those have tacit if not open approval to target Westerners. I get the sense that PRC is more constrained and less willing to suffer the consequences of hosting random hackers but Russia especially is just lawless as long as they're not targeting Russians.

[mkatx]

Apparently, it isn't illegal to scam people in Jamaica, so there are lots of scammers from Jamaica.

[foverzar]

This is such a propaganda bullshit.

I live and work in Russia. Guess what country shines brightest in WAF logs? Guess where data encryption extorters operate from? Fucking US of A. There was even a case once, where I knew specifically the person who was harassing the service I supported and there was literally NOTHING I could legally do about that.

So stop pretending (or pushing your ignorance) as if western countries are doing any better in that regard - they just as well don't care what their hackers do in other countries. All that exceptionalism is just sad.

This happens because countries that aren't the best of friends simply don't cooperate with each other, and criminals don't shy to abuse it. So from the standpoint of the rest of the world, it's the western/nato/five-eyes countries who are "just lawless as long as they're not targeting their own". Except the rest of us just have deal with it rationally, while you pat yourselves on the back with your ignorant supremacist exceptionalism, using these situations as yet another way to brew hatered. How can you actually believe that you are the only ones who have problem with foreign hackers? This is insanely naive! It's a global issue and WE ALL HAVE TO DEAL WITH IT.

The only chance to trigger any legal action here is to establish legal presence. And even then there are no guarantees if there is no damage done in their jurisdiction. At least that is the experience for someone in Russia trying to deal with Western hackers. And that was before 2022. Now it's just open cyberwafare with hacktivists attacking everything in Russia and vengeful CTOs striking back.

And JFYI, proxies are also a thing. Shit load of foreign attacks are just your locals using a properly configured proxy.

Push your politicians to actually cooperate, instead of enjoying the leeway it gives to intelligence agencies. Otherwise, enjoy the treatment you give to everyone else.