We Know You Can Pay a Million: Anja Shortland Illuminates the Dark Screen of Ransomware

0 Plays47 minutes ago

“It’s like wrecking a car to steal a pair of sunglasses. The sunglasses are the ransom. The damage to the car is fifty to seventy-five billion dollars a year.” — Anja Shortland

Cybercrime is booming. Ransomware attacks — where criminal gangs encrypt your servers and hold your data hostage until you pay — cost victims somewhere between fifty and seventy-five billion dollars a year in damage. The hackers themselves pocket around a billion. As Anja Shortland, professor of political economy at King’s College London and author of Dark Screens: Hackers and Heroes in the Shadowy World of Ransomware, puts it: “it’s like wrecking a car to steal a pair of sunglasses.” The sunglasses are the ransom. The wrecked car is the damage to the rest of us.

Shortland is an expert in extortive crime — transactions where a legal entity has to make a deal with a criminal group under conditions of zero trust. She has studied kidnap for ransom, Somali piracy, art theft, and now the booming business of ransomware. What fascinates her is not the crime itself but the institutions that emerge in the space between the legal world and the criminal underworld: the insurance companies that price the risk, the negotiators who manage the transaction, the norms that make it possible for a corporation to pay a criminal gang and actually get its data back. In Russia, hacking Westerners isn’t even a crime. In North Korea, it’s an actual department with a small army of government employees. In Iran, it’s a foreign policy. Criminality, Shortland thus argues, is defined by whoever holds power.

The game-changer, she argues, is cryptocurrency. Without it, ransomware doesn’t work — you can’t move money anonymously at scale without it. Regulate cryptocurrency, and you take the profit motive out of most of what she studies. The irony is that the current American administration is amongst the most crypto-friendly in history. Meanwhile, AI — specifically Anthropic’s Claude Mythos, the hacking model that was leaked rather than released — is about to give criminals tools that only well-resourced banks and corporations can currently deploy defensively. So cybercrime will continue to boom. Expect a pile-up of wrecked cars on our information highway.

Five Takeaways

• We Know You Can Pay a Million: The title of the UK edition of Shortland’s book is the most revealing line in ransomware. Criminal gangs don’t pick ransom figures arbitrarily. They spend weeks inside the victim’s systems, studying cash flow, cash reserves, and insurance coverage, before setting a demand on the painful side of affordable. The victim usually pays — because the alternative is losing access to patient records, customer data, or patents permanently. The hackers know this. The negotiation that follows is, in Shortland’s framing, a transaction between parties with zero trust and one thing in common: both want a deal.

• In Russia, It’s Not a Crime: Ransomware is not a uniform global crime. In Russia, theft and extortion directed at Westerners is not considered a criminal act. In North Korea, hacking is organised as a government department — a state revenue stream, not a criminal enterprise. The line between crime and legitimacy is drawn by whoever holds power. This complicates any enforcement response: you cannot extradite a North Korean government employee. You cannot prosecute a Russian hacker in a Russian court. The only effective levers are diplomatic, financial, and technical — and all three are currently being weakened.