A Case of Stolen Source Code
I find this story pretty fascinating. First, it&#x27;s interesting how a broad attack, such as putting malware into software used by a large number of people, suddenly becomes a targeted attack: the attackers grab SSH keys and start cloning git repositories. I&#x27;m assuming that there was a significant number of victims in this attack. Were they targeting developers? Or did they just happen to comb through all this data and find what looked to be source code &#x2F; git repositories.<p>The other thing I find interesting is this comment:<p>&gt; We’re working on the assumption that there’s no point in paying — the attacker has no reason to keep their end of the bargain.<p>If you really want to be successful in exploiting people through cyber attacks, I guess you will need some kind of system to provide guaranteed contracts, i.e. proof that if a victim pays the ransom, then the other end of the bargain will be held.<p>It might seem that there&#x27;s some incentive for ransom holders to hold up their end of the bargain for the majority of cases if they want their attacks to be profitable.