Federal Prosecutors Intensify Focus on Ransomware and Business Email Compromise Under CFAA
Federal prosecutors are increasingly targeting ransomware and business email compromise (BEC) activities under the Computer Fraud and Abuse Act (CFAA), 18 U.S.C. § 1030. The CFAA is the primary federal statute used to prosecute hacking and computer fraud. Ransomware involves attackers encrypting or stealing data and demanding payment, often in cryptocurrency. Prosecutors are pursuing not only those who deploy malware but also 'affiliates,' initial access brokers who sell network credentials, and individuals involved in laundering ransom payments. BEC schemes involve fraudsters impersonating executives, vendors, or real estate agents to redirect wire transfers. These cases frequently lead to the prosecution of 'money mules' who open accounts to receive illicit funds, many of whom may not fully understand the broader criminal enterprise. New Jersey, a hub for financial services, pharmaceuticals, telecommunications, and technology, is a frequent target for cyberattacks and a common venue for such prosecutions...
