Kevin Beaumont on Nostr: Each year, around Christmas and New Year, I quietly set fire to ransomware groups ...

Each year, around Christmas and New Year, I quietly set fire to ransomware groups that target hospitals and DDoS groups in my spare time - by doing things like collecting all the info and informing their ISPs.

This year is the first year I haven’t been able to get a single group taken offline. Why? All the ISPs have referred me to CERTs, law enforcement or threat intelligence companies rather than enforcing their terms of service.

There shouldn’t be an industry with incentives to just monitor.