The White House held the third annual Counter Ransomware Initiative (CRI), convening 50 entities – 48 countries, the European Union, and Interpol – to discuss combating ransomware. During this year’s summit, members were focused on:
- Developing capabilities to disrupt attackers and their infrastructure
- Improving cybersecurity through information-sharing and
- Fighting back against ransomware actors.
Out of the summit, there were a few notable deliverables. The first being that nearly all of the governments signed a pledge against paying ransoms to hackers. As the first-ever collective statement of this kind, it signaled a powerful unified front denying cybercriminals the incentives they seek to persist and profit from their attacks.
Albeit inspiring, officials have publicly noted that the pledge is not binding, raising questions on the effectiveness of the commitment. With the way that the agreement is written, it doesn’t lead to a ban, includes carve-outs for emergencies and still gives governments room to decide on a case-by-case basis whether a ransom payment is warranted.
Additionally, the U.S. Department of the Treasury published a "blacklist" containing details on cryptocurrency wallets implicated in previous ransom transfers. The idea behind this is to use artificial intelligence to analyze blockchains, potentially halting transactions originating from flagged wallets.
Finally, the CRI also led to additional information sharing capabilities by Lithuania, Israel and the United Arab Emirates that will enable member countries to quickly exchange news of threat indicators.
There is no doubt that ransomware is a cross-border, transnational threat that demands international collaboration. As the coalition of countries work to expand their influence, potential projects in the future may include formalizing CRI processes by determining governance frameworks, exploring how partnerships with the cyber insurance industry can help in countering ransomware, and how countries should work together with AI and other emerging technologies. To learn more about this year’s summit and its outcomes, click here.
Read Next
Yet Another Blog About “Cyber Operations:” The Trump II Administration’s National Cyber Strategy and Private Sector Collaboration
The recently released National Cyber Strategy provides some insight into questions about the Administration’s approach to offensive cyber policy, and particularly the private sector’s role.
Center for Cybersecurity Policy and Law to the European Commission: Proposed Measures on Search Data Sharing Raise Security Concerns
The Center for Cybersecurity Policy & Law issued comments in response to DMA.100209 – Alphabet – Article 6(11) -- warning of the security and privacy risks of proposed data sharing requirements.
Digi Americas Brings Multinational Government Delegation to RSAC 2026
The Digi Americas Alliance hosted a delegation of more than 25 high-level government officials from eight countries across Latin America and the Caribbean at the RSAC Conference in San Francisco.
