Play Ransomware Gang’s Wave of Cyberattacks and Google’s $700 Million Pledge in Groundbreaking Antitrust Settlement

In an effort, the FBI, the US Cybersecurity and Infrastructure Security Agency (CISA), and the Australian Cyber Security Centre have issued a concerning advisory shedding light on the Play ransomware gang. 

This sophisticated threat actor has allegedly executed over 300 successful attacks on various organizations since June 2022, leaving a trail of disruption across North America, South America, and Europe.

Ruthless Tactics and Strategic Pivots

Play targeted South American government agencies before focusing on US and European entities. 

This year alone, US cities such as Oakland, California; Lowell, Massachusetts; and Dallas, Texas, fell victim to the group’s malicious activities, resulting in extensive disruptions and the compromise of citizen data.

Play’s Modus Operandi

The advisory highlights Play’s penchant for exploiting stolen account credentials and vulnerabilities in widely used products like FortiOS and Microsoft tools. 

The gang employs a double-extortion model, encrypting systems post-data exfiltration. The ransom notes issued lack initial ransom demands or payment instructions, emphasizing confidentiality through direct contact with victims via email.

Google’s $700 Million Pledge: An Antitrust Resolution

In a groundbreaking antitrust settlement with US states and consumers, Google has committed to a substantial $700 million payment and a pledge to foster increased competition within its Play app store. 

In a San Francisco federal court on Monday, the terms of this agreement outline a payment of $630 million into a settlement fund for consumers and an additional $70 million into a fund earmarked for states. 

It’s worth noting that the final approval from a judge is still pending.

Financial Restitution for Consumers

According to the settlement, eligible consumers stand to receive a minimum of $2, with the possibility of additional payments based on their expenditure within Google Play between August 16th, 2016, and September 30th, 2023. 

The inclusion of all 50 states, the District of Columbia, Puerto Rico, and the Virgin Islands in this resolution underscores its nationwide significance.

Allegations of Unfair Practices

The backdrop of this settlement involves allegations that Google had been overcharging consumers by imposing unjust restrictions on app distribution for Android devices and levying unnecessary fees for in-app transactions. 

As Google's ringer inside the company it is absolutely unsurprising he was summarily terminated, his alignment with Google has been holding down OpenAI's value from the $250-350bn valuation it should be at waiting for Google's Anti-Trust Settlement to clear. The lid is off!

— James Reginald Harris jr (@xyzqg6) November 20, 2023

It’s noteworthy that, despite the settlement, Google has not admitted to any wrongdoing.

Continuous Exposure Management Is a Pivotal Strategy!

Continuous exposure management as a pivotal strategy promises substantial performance, efficiency, and risk mitigation improvements. This strategic shift has become more critical than ever in the face of changing cyber threat dynamics.

On the other hand, Google’s settlement reinforces Android’s choice and flexibility, upholds robust security measures, and preserves Google’s ability to compete within the operating system.

What do you think about these developments? Let us know in the comments sections below.