Fuel holding tanks are seen at Colonial Pipeline's Linden Junction Tank Farm on May 10, 2021 in Woodbridge, New Jersey. Alpharetta, Georgia-based Colonial Pipeline, which has the largest fuel pipeline, was forced to shut down its oil and gas pipeline system on Friday after a ransomware attack that has slowed down the transportation of oil in the eastern U.S. On Sunday, the federal government announced an emergency declaration that extends through June 8th and can be renewed. On Monday, the FBI confirmed that the cyberattack was carried out by DarkSide, a cybercrime gang believed to operate out of Russia.
Alpharetta, Georgia-based Colonial Pipeline was forced to shut down its oil and gas pipeline system last month after a ransomware attack that has slowed down the transportation of oil in the eastern U.S.
Michael Santiago/Getty Images

The US government is exploring ways to trace cryptocurrency payments made to culprits of ransomware attacks on private businesses and local governments, according to a report from The Wall Street Journal.

Cryptocurrencies like bitcoin have been the favored payment method of hackers that encrypt important files of businesses and hold that data ransom until they are paid. The anonymous nature of bitcoin makes the cryptocurrency ideal payment as hackers work to evade law enforcement.

Recent victims of these attacks include Colonial Pipeline, which paid a $4.4 million ransom payment to regain access to its data, and JBS, the world's largest meat producer. The hack attacks have put a spotlight on the practice and many consider it a national security risk, as critical infrastructure can be targeted. The Colonial Pipeline attack led to a shortage of fuel in several south eastern states for a couple of days.

In a Wednesday letter to business leaders, Deputy National Security Adviser Anne Neuberger said US officials are working with international partners on developing consistent policies for when to pay ransoms and how to trace them, according to the report.

While the US government strongly discourages businesses from paying the ransom demands, many businesses have no choice as the encrypted data is essential to keep operations running. The hackers honor the terms of their ransom, as they want to build credibility that paying the fee will in fact get their data back.

To get a better handle on who's making large bitcoin transactions, the Treasury Department has proposed additional rules that would require cryptocurrency transactions above $10,000 to be reported to the IRS, similar to cash transactions over that same threshold.

But ransomware experts are skeptical that bitcoin payment restrictions and tighter regulations will ultimately solve the problem, as the criminals would likely switch to another less-regulated currency that can evade governments, the report said.

Read the original article on Business Insider