# Ransomware on The No Agenda Show

Ransomware comes up in 39 chapters across 36 episodes of The No Agenda Show, from October 2012 to September 2024.

- **Chapters:** 39
- **Episodes:** 36
- **Discussed:** October 2012 – September 2024
- **Related topics:** [Bitcoin](https://search.noagendashow.net/topic/bitcoin.md), [Cyber Attack](https://search.noagendashow.net/topic/cyber-attack.md), [Fbi](https://search.noagendashow.net/topic/fbi.md), [Cybersecurity](https://search.noagendashow.net/topic/cybersecurity.md), [Colonial Pipeline](https://search.noagendashow.net/topic/colonial-pipeline.md), [Russia](https://search.noagendashow.net/topic/russia.md), [Change Healthcare](https://search.noagendashow.net/topic/change-healthcare.md), [Jbs](https://search.noagendashow.net/topic/jbs.md), [Joe Biden](https://search.noagendashow.net/topic/joe-biden.md), [Klaus Schwab](https://search.noagendashow.net/topic/klaus-schwab.md)

## Chapters 1–20 of 39

### REvil Ransomware Gang Goes Dark

- **Episode:** [1365: Vaccine Poverty](https://search.noagendashow.net/episode/1365-vaccine-poverty.md)
- **Published:** 2024-09-30
- **Time:** 3:50:48–3:54:27
- **Transcript:** https://search.noagendashow.net/episode/1365-vaccine-poverty/chapter/revil-ransomware-gang-goes-dark.md

The notorious REvil ransomware gang mysteriously disappeared from the internet following a warning from President Biden to Vladimir Putin. The State Department is offering a $10 million reward for information on the group. The hosts question the logic of the reward if the government already knows the group is Russia-based, suggesting a "quid pro quo" deal is underway.

Keywords: [revil](https://search.noagendashow.net/topic/revil.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), [russia](https://search.noagendashow.net/topic/russia.md), [joe biden](https://search.noagendashow.net/topic/joe-biden.md), [cyber security](https://search.noagendashow.net/topic/cyber-security.md)

### Change Healthcare, Ransomware Cyber Pandemic

- **Episode:** [1643: NetBEUI](https://search.noagendashow.net/episode/1643-netbeui.md)
- **Published:** 2024-03-17
- **Time:** 1:26:00–1:36:26
- **Transcript:** https://search.noagendashow.net/episode/1643-netbeui/chapter/change-healthcare-ransomware-cyber-pandemic.md

Former FDA Commissioner Scott Gottlieb discusses the massive ransomware attack on Change Healthcare, a subsidiary of UnitedHealthcare. The attack disrupted a third of the U.S. medical claims system, highlighting a single point of failure in the healthcare infrastructure and prompting warnings about a potential "cyber pandemic."

Keywords: [change healthcare](https://search.noagendashow.net/topic/change-healthcare.md), [scott gottlieb](https://search.noagendashow.net/topic/scott-gottlieb.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), [unitedhealthcare](https://search.noagendashow.net/topic/unitedhealthcare.md), [cyber pandemic](https://search.noagendashow.net/topic/cyber-pandemic.md)

### Change Healthcare Cyberattack, Black Cat Ransomware

- **Episode:** [1642: Million Morons](https://search.noagendashow.net/episode/1642-million-morons.md)
- **Published:** 2024-03-17
- **Time:** 2:06:49–2:11:20
- **Transcript:** https://search.noagendashow.net/episode/1642-million-morons/chapter/change-healthcare-cyberattack-black-cat-ransomware.md

Change Healthcare, a subsidiary of UnitedHealth Group, was targeted by the Black Cat ransomware gang, resulting in a $22 million payment and massive disruptions to the U.S. healthcare billing system. The Department of Health and Human Services (HHS) has launched an investigation into the breach, which affected roughly one-third of all U.S. patient records.

Keywords: [change healthcare](https://search.noagendashow.net/topic/change-healthcare.md), black cat, [ransomware](https://search.noagendashow.net/topic/ransomware.md), [unitedhealth group](https://search.noagendashow.net/topic/unitedhealth-group.md), [hhs](https://search.noagendashow.net/topic/hhs.md)

### Change Healthcare Cyber Attack and Ransomware

- **Episode:** [1638: Test Tube Babies](https://search.noagendashow.net/episode/1638-test-tube-babies.md)
- **Published:** 2024-02-29
- **Time:** 2:09:10–2:13:38
- **Transcript:** https://search.noagendashow.net/episode/1638-test-tube-babies/chapter/change-healthcare-cyber-attack-and-ransomware.md

A major cyber attack on Change Healthcare, a subsidiary of UnitedHealthcare, has disrupted prescription drug fulfillment across the US. The ransomware gang Black Cat is suspected of the attack, which has forced many pharmacies to switch to manual paper processing and the "honor system" for billing.

Keywords: [change healthcare](https://search.noagendashow.net/topic/change-healthcare.md), [unitedhealthcare](https://search.noagendashow.net/topic/unitedhealthcare.md), [cyber attack](https://search.noagendashow.net/topic/cyber-attack.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), black cat

### CISA Director Jen Easterly on AI and Software Insecurity

- **Episode:** [1612: Global Donut](https://search.noagendashow.net/episode/1612-global-donut.md)
- **Published:** 2023-12-06
- **Time:** 53:53–1:01:30
- **Transcript:** https://search.noagendashow.net/episode/1612-global-donut/chapter/cisa-director-jen-easterly-on-ai-and-software-insecurity.md

Jen Easterly, Director of the Cybersecurity and Infrastructure Security Agency (CISA), discusses the inherent insecurity of the internet and software. She argues that AI must be developed with "guardrails" to prevent ransomware and infrastructure attacks. The hosts criticize her background as a "globalist spook" and mock her assertion that software was never intended to be safe.

Keywords: jen easterly, [cisa](https://search.noagendashow.net/topic/cisa.md), [cybersecurity](https://search.noagendashow.net/topic/cybersecurity.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), software safety, [globalist](https://search.noagendashow.net/topic/globalist.md), [biden administration](https://search.noagendashow.net/topic/biden-administration.md)

### ACH Processing Error, Bank Deposit Delays, FedNow

- **Episode:** [1605: Techno-douche](https://search.noagendashow.net/episode/1605-techno-douche.md)
- **Published:** 2023-11-05
- **Time:** 2:04:55–2:10:00
- **Transcript:** https://search.noagendashow.net/episode/1605-techno-douche/chapter/ach-processing-error-bank-deposit-delays-fednow.md

A major processing error in the Automated Clearinghouse (ACH) system caused significant delays for direct deposits at several large U.S. banks. While officials cited a "processing error," the hosts speculate on the possibility of ransomware or a move toward the "FedNow" system.

Keywords: automated clearinghouse, [federal reserve](https://search.noagendashow.net/topic/federal-reserve.md), [wells fargo](https://search.noagendashow.net/topic/wells-fargo.md), u.s. bank, [ransomware](https://search.noagendashow.net/topic/ransomware.md), [fednow](https://search.noagendashow.net/topic/fednow.md)

### Cyber Attacks on Clorox and MGM Resorts

- **Episode:** [1592: Vermox](https://search.noagendashow.net/episode/1592-vermox.md)
- **Published:** 2023-09-21
- **Time:** 2:24:30–2:26:13
- **Transcript:** https://search.noagendashow.net/episode/1592-vermox/chapter/cyber-attacks-on-clorox-and-mgm-resorts.md

Clorox is reportedly facing supply shortages following a significant cyber attack that disrupted its operations. Simultaneously, MGM Resorts is losing an estimated $8 million per day due to a breach that has affected gambling payouts and hotel systems. These incidents are discussed as potential precursors to a larger "cyber pandemic."

Keywords: [clorox](https://search.noagendashow.net/topic/clorox.md), [mgm resorts](https://search.noagendashow.net/topic/mgm-resorts.md), [cyber attack](https://search.noagendashow.net/topic/cyber-attack.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), supply shortage

### MGM and Caesars Hacking, Scattered Spider Ransomware

- **Episode:** [1591: Half-Jacked](https://search.noagendashow.net/episode/1591-half-jacked.md)
- **Published:** 2023-09-17
- **Time:** 2:31:29–2:36:20
- **Transcript:** https://search.noagendashow.net/episode/1591-half-jacked/chapter/mgm-and-caesars-hacking-scattered-spider-ransomware.md

A hacking group known as Scattered Spider targeted MGM Resorts and Caesars Palace in Las Vegas, using social engineering to bypass IT help desks. While Caesars reportedly paid a $15 million ransom, MGM's systems remained offline for days, causing massive operational disruptions across their properties.

Keywords: [mgm resorts](https://search.noagendashow.net/topic/mgm-resorts.md), caesars palace, scattered spider, [ransomware](https://search.noagendashow.net/topic/ransomware.md), [las vegas](https://search.noagendashow.net/topic/las-vegas.md)

### The Guardian Ransomware, BBC Interview Fallout

- **Episode:** [1521: Healthscare System](https://search.noagendashow.net/episode/1521-healthscare-system.md)
- **Published:** 2023-01-15
- **Time:** 2:16:03–2:19:16
- **Transcript:** https://search.noagendashow.net/episode/1521-healthscare-system/chapter/the-guardian-ransomware-bbc-interview-fallout.md

The Guardian newspaper is currently operating under a ransomware attack, with staff ordered to work from home until late January. Meanwhile, the outlet criticized the BBC for allowing cardiologist Aseem Malhotra to "hijack" an interview with claims about vaccine-related heart risks. The hosts noted the speed with which mainstream outlets moved to discredit Malhotra's televised statements.

Keywords: [the guardian](https://search.noagendashow.net/topic/the-guardian.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), [bbc](https://search.noagendashow.net/topic/bbc.md), asim malhotra, [pfizer](https://search.noagendashow.net/topic/pfizer.md)

### February 17 General Strike and DC Ransomware

- **Episode:** [900: 900](https://search.noagendashow.net/episode/900-900.md)
- **Published:** 2022-04-28
- **Time:** 1:45:44–1:48:32
- **Transcript:** https://search.noagendashow.net/episode/900-900/chapter/february-17-general-strike-and-dc-ransomware.md

A worldwide general strike against "Trumpism" is being promoted for February 17th. Meanwhile, the Washington Post reported that hackers infected 70% of the storage devices for DC police surveillance cameras with ransomware just eight days before the inauguration. This security breach reportedly hampered the city's ability to record data during the presidential transition events.

Keywords: [general strike](https://search.noagendashow.net/topic/general-strike.md), [trumpism](https://search.noagendashow.net/topic/trumpism.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), [cctv](https://search.noagendashow.net/topic/cctv.md), [washington dc](https://search.noagendashow.net/topic/washington-dc.md), [washington post](https://search.noagendashow.net/topic/washington-post.md)

### Food Processing Plant Fires, FBI Cyber Warnings, Black Swans

- **Episode:** [1445: Trusted Flaggers](https://search.noagendashow.net/episode/1445-trusted-flaggers.md)
- **Published:** 2022-04-24
- **Time:** 2:44:32–2:49:55
- **Transcript:** https://search.noagendashow.net/episode/1445-trusted-flaggers/chapter/food-processing-plant-fires-fbi-cyber-warnings-black-swans.md

A series of fires and plane crashes at U.S. food processing plants has sparked concerns about the stability of the food supply chain. The FBI has issued warnings regarding potential Russian ransomware attacks on agricultural cooperatives during critical harvest seasons, framing these disruptions as potential "Black Swan" events.

Keywords: [food supply](https://search.noagendashow.net/topic/food-supply.md), [fbi](https://search.noagendashow.net/topic/fbi.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), [cyber attacks](https://search.noagendashow.net/topic/cyber-attacks.md), black swan

### Ukraine Cyber Attack, REvil Hacking Group Arrests

- **Episode:** [1417: Get Boris!](https://search.noagendashow.net/episode/1417-get-boris.md)
- **Published:** 2022-01-16
- **Time:** 45:13–49:10
- **Transcript:** https://search.noagendashow.net/episode/1417-get-boris/chapter/ukraine-cyber-attack-revil-hacking-group-arrests.md

A wide-ranging cyber attack targeted Ukrainian government websites, which Western officials characterized as a precursor to a physical invasion. Simultaneously, Russia's FSB arrested members of the REvil ransomware group at the request of the United States. The hosts question why the cooperation on hacking arrests received less media coverage than the narrative of imminent Russian aggression.

Keywords: [ukraine](https://search.noagendashow.net/topic/ukraine.md), [cyber attack](https://search.noagendashow.net/topic/cyber-attack.md), [revil](https://search.noagendashow.net/topic/revil.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), [fsb](https://search.noagendashow.net/topic/fsb.md), jim sciutto

### Labor Shortages, Dudes Named Ben

- **Episode:** [1379: Afghaniscam](https://search.noagendashow.net/episode/1379-afghaniscam.md)
- **Published:** 2021-09-06
- **Time:** 1:21:59–1:24:25
- **Transcript:** https://search.noagendashow.net/episode/1379-afghaniscam/chapter/labor-shortages-dudes-named-ben.md

Severe labor shortages are impacting fast-food chains like Whataburger, where dining rooms are closing due to a lack of staff. There is a call for "dudes named Ben"—tech-savvy individuals—to disrupt mainstream media messaging through cyber means as societal tensions rise.

Keywords: [whataburger](https://search.noagendashow.net/topic/whataburger.md), [labor shortage](https://search.noagendashow.net/topic/labor-shortage.md), [cyber attacks](https://search.noagendashow.net/topic/cyber-attacks.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), [mainstream media](https://search.noagendashow.net/topic/mainstream-media.md)

### Pfizer Stock Performance and Cyber Ransomware

- **Episode:** [1366: Pingdemic](https://search.noagendashow.net/episode/1366-pingdemic.md)
- **Published:** 2021-07-25
- **Time:** 1:07:33–1:09:58
- **Transcript:** https://search.noagendashow.net/episode/1366-pingdemic/chapter/pfizer-stock-performance-and-cyber-ransomware.md

Despite its dominant market position, Pfizer's stock has remained relatively flat, leading to speculation about underlying corporate troubles. A major law firm representing Pfizer, Johnson & Johnson, and Boeing was recently hit by a cyber hack. Additionally, while J&J is involved in a $28 billion opioid settlement, Pfizer has avoided similar legal penalties thus far.

Keywords: [pfizer](https://search.noagendashow.net/topic/pfizer.md), [stock market](https://search.noagendashow.net/topic/stock-market.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), law firms, [opioid crisis](https://search.noagendashow.net/topic/opioid-crisis.md)

### REvil Ransomware Group, Biden and Putin Summit

- **Episode:** [1364: Freedom Phoney](https://search.noagendashow.net/episode/1364-freedom-phoney.md)
- **Published:** 2021-07-17
- **Time:** 1:11:55–1:14:42
- **Transcript:** https://search.noagendashow.net/episode/1364-freedom-phoney/chapter/revil-ransomware-group-biden-and-putin-summit.md

The Russian-linked ransomware group REvil saw its websites go offline shortly after President Joe Biden spoke with Vladimir Putin regarding cybersecurity. While some speculate this was a manifest U.S. retaliation, others suggest it could be Russian law enforcement activity or a planned "exit" by the hackers. The disappearance of the group follows high-profile attacks on the JBS meat processing plant and Kaseya.

Keywords: [revil](https://search.noagendashow.net/topic/revil.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), [joe biden](https://search.noagendashow.net/topic/joe-biden.md), [vladimir putin](https://search.noagendashow.net/topic/vladimir-putin.md), [cyber attack](https://search.noagendashow.net/topic/cyber-attack.md)

### Kaseya Ransomware Attack, Cyber Polygon and Supply Chains

- **Episode:** [1362: Shot to Win](https://search.noagendashow.net/episode/1362-shot-to-win.md)
- **Published:** 2021-07-09
- **Time:** 2:35:51–2:43:27
- **Transcript:** https://search.noagendashow.net/episode/1362-shot-to-win/chapter/kaseya-ransomware-attack-cyber-polygon-and-supply-chains.md

The hosts analyze the Kaseya VSA ransomware attack, which they classify as a "supply chain attack" via automated software updates. They link the event to the World Economic Forum's "Cyber Polygon" exercise, which simulates a targeted attack on digital ecosystems. Adam Curry notes that the hack included "Black Lives Matter" and "Trump Sucks" registry modifications.

Keywords: kaseya, [ransomware](https://search.noagendashow.net/topic/ransomware.md), cyber polygon, [klaus schwab](https://search.noagendashow.net/topic/klaus-schwab.md), supply chain attack

### Kaseya VSA Ransomware Attack and Global Supply Chain Vulnerability

- **Episode:** [1361: Variant Factories](https://search.noagendashow.net/episode/1361-variant-factories.md)
- **Published:** 2021-07-04
- **Time:** 10:52–17:53
- **Transcript:** https://search.noagendashow.net/episode/1361-variant-factories/chapter/kaseya-vsa-ransomware-attack-and-global-supply-chain-vulnerability.md

The Russia-based hacking group R-Evil launched a massive ransomware attack targeting Kaseya, a software provider used for remote computer management. The breach affected over 1,000 businesses worldwide, including a Swedish grocery chain that was forced to close 800 stores due to locked cash registers. President Biden has directed U.S. intelligence to investigate Russian involvement, while critics point to the inherent risks of outsourcing software development and cloud-based infrastructure.

Keywords: kaseya, [ransomware](https://search.noagendashow.net/topic/ransomware.md), r-evil, [russia](https://search.noagendashow.net/topic/russia.md), [cyber attack](https://search.noagendashow.net/topic/cyber-attack.md)

### JBS Ransomware Attack, Bitcoin Traceability, and Putin's "Indigestion"

- **Episode:** [1355: Stilts and Steroids](https://search.noagendashow.net/episode/1355-stilts-and-steroids.md)
- **Published:** 2021-06-13
- **Time:** 2:16:18–2:21:18
- **Transcript:** https://search.noagendashow.net/episode/1355-stilts-and-steroids/chapter/jbs-ransomware-attack-bitcoin-traceability-and-putin-s-indigestion.md

Meat supplier JBS confirmed paying an $11 million ransom to hackers following a cyberattack that disrupted U.S. beef processing. While the DOJ recovered most of the Colonial Pipeline ransom, media outlets continue to blame Russia for these incidents. Vladimir Putin dismissed accusations of state-sponsored hacking and political assassinations as "verbal indigestion" during a confrontational interview.

Keywords: [jbs](https://search.noagendashow.net/topic/jbs.md), [ransomware](https://search.noagendashow.net/topic/ransomware.md), [bitcoin](https://search.noagendashow.net/topic/bitcoin.md), [vladimir putin](https://search.noagendashow.net/topic/vladimir-putin.md), [colonial pipeline](https://search.noagendashow.net/topic/colonial-pipeline.md), [russia](https://search.noagendashow.net/topic/russia.md)

### FBI Ransomware Investigations and the "Variant" Terminology

- **Episode:** [1354: FAQs 4 Hacks](https://search.noagendashow.net/episode/1354-faqs-4-hacks.md)
- **Published:** 2021-06-10
- **Time:** 46:53–54:49
- **Transcript:** https://search.noagendashow.net/episode/1354-faqs-4-hacks/chapter/fbi-ransomware-investigations-and-the-variant-terminology.md

The FBI announced the seizure of Bitcoin proceeds from the DarkSide ransomware group, with officials noting they are currently investigating over 100 "ransomware variants." Critics point out the linguistic shift in using the word "variant"—typically associated with viruses—to describe software iterations. A 60 Minutes segment featured FBI official Mike Chrisman and Hancock Hospital CEO Steve Long discussing the SamSam ransomware attack and the decision to pay hackers in Bitcoin.

Keywords: [fbi](https://search.noagendashow.net/topic/fbi.md), darkside, [ransomware](https://search.noagendashow.net/topic/ransomware.md), [variant](https://search.noagendashow.net/topic/variant.md), [60 minutes](https://search.noagendashow.net/topic/60-minutes.md), [scott pelley](https://search.noagendashow.net/topic/scott-pelley.md)

### Bitcoin Traceability and Ransomware-as-a-Service

- **Episode:** [1354: FAQs 4 Hacks](https://search.noagendashow.net/episode/1354-faqs-4-hacks.md)
- **Published:** 2021-06-10
- **Time:** 54:54–58:10
- **Transcript:** https://search.noagendashow.net/episode/1354-faqs-4-hacks/chapter/bitcoin-traceability-and-ransomware-as-a-service.md

Contrary to media claims that Bitcoin is untraceable, the FBI successfully tracked and seized 63.7 Bitcoins by obtaining private keys, likely through custodial exchanges like Coinbase. Security experts from NetRise demonstrated how "Ransomware-as-a-Service" platforms allow low-skilled criminals to lease encryption tools for a cut of the profits. This automation has led to warnings of a "cyber pandemic" targeting critical infrastructure.

Keywords: [bitcoin](https://search.noagendashow.net/topic/bitcoin.md), [fbi](https://search.noagendashow.net/topic/fbi.md), [coinbase](https://search.noagendashow.net/topic/coinbase.md), darkside, netrise, ransomware-as-a-service

[Next page](https://search.noagendashow.net/topic/ransomware.md?offset=20)

---

This is the markdown version of a page on The No Agenda Show for AI agents. Every public page on this site has one: add `.md` to its URL, or request it with `Accept: text/markdown`.

- [Site index for agents (llms.txt)](https://search.noagendashow.net/llms.txt)
- [Home](https://search.noagendashow.net/index.md)
- [Search transcripts](https://search.noagendashow.net/search.md)
- [All episodes](https://search.noagendashow.net/episodes.md)
- [Topics](https://search.noagendashow.net/topics.md)
- [People](https://search.noagendashow.net/people.md)