It's a common euphemism in ransomware and protection rackets in general. One of my favourites is the message the akira group leaves in infected machines that goes something like:
Congratulations, you have passed a surprise information
security audit and become a victim of ransomware.
[...]
We offer:
1) full decryption assistance
2) evidence of data removal
3) security report on vulnerabilities we found
4) guarantees not to publish or sell your data
5) guarantees not to attack you in the future
They're just a security consulting company that you didn't know you had on payroll!
Btw I looked at what they provide as evidence of data removal (2) and it's literally just the stdout of `rm -vrf data` lol. I mean, I get that it's impossible to provide evidence of absence, plus the victims have no leverage anyway, but I dig the theatrics.
Btw I looked at what they provide as evidence of data removal (2) and it's literally just the stdout of `rm -vrf data` lol. I mean, I get that it's impossible to provide evidence of absence, plus the victims have no leverage anyway, but I dig the theatrics.