Lawfare Daily: The Shadowy World of Ransomware with Professor Anja Shortland

In this episode of The Lawfare Podcast, host Jonathan Sederbaum interviews Professor Anja Shortland, a political economy expert at King's College London, about her book *Dark Screens: Hackers and Heroes in the Shadowy World of Ransomware*. Shortland traces the evolution of ransomware from its early technical roots in the 1980s to its current status as a multi-billion-dollar global threat, highlighting three generations of ransomware: automated, human-operated, and data-exfiltration-driven. She explains how the convergence of asymmetric encryption, the dark web (via Tor), and cryptocurrencies like Bitcoin enabled ransomware to scale. The rise of 'ransomware as a service' (RaaS) and 'ransomware settlement as a service' further industrialized the threat, outsourcing attacks to affiliates while creating exploitative intermediaries. Shortland dissects major groups like REvil, Conti, and Lockbit, illustrating how geopolitical tensions, internal fractures, and law enforcement operations—such as the UK’s National Crime Agency’s takedown of Lockbit—have reshaped the landscape. She critiques the lack of effective policy solutions, including the failed 'ransom ban' idea, and emphasizes the importance of cyber hygiene, resilience, and preparedness. The episode concludes with a discussion of the private-sector-led Ransomware Task Force and the ongoing need for systemic change. Key takeaways include: (1) Ransomware is no longer just about encryption—it’s about data theft and extortion; (2) The rise of RaaS has democratized cybercrime, enabling less-skilled actors to launch large-scale attacks; (3) Law enforcement successes, like the Lockbit takedown, can disrupt trust in ransomware gangs; (4) Cyber resilience—through backups, patching, and multi-factor authentication—is more critical than ever; (5) Geopolitical tolerance, especially in Russia and parts of Eastern Europe, enables the ransomware ecosystem; (6) Private-sector coordination (e.g., the Ransomware Task Force) is vital when governments lag; (7) The 'ransom settlement' industry often exploits victims rather than helping them; and (8) There is no single silver bullet—defense requires a multi-layered, adaptive strategy.