Cloud Hosting

Eastern Europe can be perilous if you have the kind of job Kurtis Minder has.

Its a line of work featuring regular correspondence with the FBI and familiarity with the U.S. Treasury Departments Office of Foreign Asset Control Sanctions list.

Minder operates in the sprawling world of cybersecurity, drawing interest for his work in ransomware negotiation. Ransomware, the cybercrime du jour that shut down Colonial Pipeline last May and ground the city of Atlanta to a halt in 2018, refers to bad actors infiltrating businesses, nonprofit agencies or government services, encrypting important data and then demanding payment to unlock the files.

Its an interesting field in which to hang a shingle.

A local friend made the introduction, recalled John Marshall, president of Colorado Mesa University, of the first time he met Minder. And he told me this wild story about how hes grown this wild business.

We just fortuitously stumbled across literally the world expert in this hot field.

NOT VERY FRIENDLY

After a ransomware victim gets a demand from the attackers is where Minder, who co-founded the company GroupSense, steps in. He specializes in a sort of cyber reconnaissance, in addition to the negotiation work. He closed his first such negotiation in July 2020 and has become a significant figure in the world of ransomware negotiations and cybersecurity, having been interviewed in outlets ranging from The New Yorker, to Vice on HBO.

Of course, that notoriety extends to the world of cybercriminals, who Minder discusses the way a football coach might talk about a division rival.

They dont generally like firms like us, so its generally not very friendly. Theyre not saying, like, Im going to go get Kurtis or something like that, Minder told The Daily Sentinel, before offering this caveat: Although, there has been dark web chatter to that degree. But I dont know if theyre ransomware actors or just other bad guys. Because we make enemies of a lot of bad guys other than just ransomware.

Minder doesnt boast of the dangers of his job the way those who meet him might. He also regularly credits his staff, many of whom are former law enforcement or intelligence professionals.

Still, its not a boring job, either, and Minder tells a good story, be it about the curious world of cybercrime or a recent motorcycle ride down Colorado Highway 141 to Gateway.

Take for example the firm Minders company owns in Sofia, which he wont be visiting for awhile for decidedly non-COVID-19 reasons.

That team, I wanted to go see them and I was sort of told off the record to stay out of Bulgaria for right now, Minder said. Its weird. I never imagined myself getting pushed into a white van or anything.

While he doesnt see himself as a future tenant of the back of a van, Minder does know the same people hacking into companies he works with are always trying to embarrass him. Minder jokes that his security team hates me.

It does make us a target and were paranoid sufficiently, he said.

Though international, corporate and legal intrigue headline Minders profile, in person hes a polite character who loves BMW motorcycles and earnestly wants to help his clients as well as nonprofits or small businesses who happen to open the wrong email.

I dont poke the bear, Minder said, referring to his digital opponents in the cyber underground. Im just trying to help people.

HOW IT WORKS

GroupSense sports an impressive list of clients that includes some major companies, but not every problem needs the attention of the companys co-founder. Minder, who is partnering with Colorado Mesa University on a nonprofit aimed at helping small organizations with cybersecurity, now works on two ends of the negotiation spectrum.

If the asking price for the bad guy is above eight figures, so above $10 million, then Im involved, Minder said. And then the only other time is when the company is so small that they cant afford to pay our fees and I do it for free.

That pro bono work is valuable in a realm as specialized as this. Beyond ransomware negotiation, GroupSense helps companies know what they might be vulnerable to. Minder compares it to intelligence agencies spying on foreign countries to find out what they might be capable of and what they might attack.

Intelligence in business, and specifically in cyber, is the exact same thing. What are the bad guys doing right now, what kinds of tools are they using? Minder said.

Ransomware attacks, like the Colonial Pipeline attack that threatened one of the nations largest fuel providers, often target internet carelessness.

An employee might use their work email to sign up for something at a different website Minder, when explaining the problem, cites iloveknitting.com as an example, since the domain doesnt exist yet. If that other website is hacked, that email and the password are compromised and, since people often reuse passwords, its easy enough for a hacker to use the credentials they found at iloveknitting.com to log into the company they can extort.

That site gets hacked opportunistically Minder said. Theyre not targeting the knitting lady; she just has a site with some vulnerabilities.

Once the bad actors have access, they lock down important files and demand payment in the form of cryptocurrency like Bitcoin.

GroupSense helps clients first determine if its even worth it to retrieve the lost information. If a company can recover their data, or do without, for less than the cost of the ransom, theyll cut their losses.

If, however, the locked information is valuable enough, then Minder will go to work using a handful of tactics that he certainly didnt learn in school and that, until recently, had not been used in this application. Its something GroupSense has gotten pretty good at.

We traditionally get the rate down below 10% of the original asking on a pretty regular basis. Or below, Minder said, adding that the cyber insurance companies he talks with note that success rate to be pretty ing good.

Minder, 44, grew up in central Illinois Not near Chicago, hell preemptively quip and spent about a semester and a half in community college before ditching the pursuit altogether.

We were poor. I was not a great student in high school so I didnt get any scholarships. I was about a C/D student. I did start going to the local community college with the intent of getting to the point where I might do a four-year degree, Minder said.

But, by that time Minder was well into his tech career, having gotten a job when he was 16 working nearly full time at an internet service provider. In high school he was writing papers about how users could fake their identity in the early days of the internet and, after reading one of the preeminent books on computer hacking at the time, Minder was already combing through logs at his internet company and kicking out early hackers.

By the time he was taking classes, he was well ahead of what most universities were capable of teaching at the time.

The stuff I was doing at work wasnt slightly ahead of what they were teaching, it was years ahead of what they were teaching, Minder said.

That knack for independent learning carried through Minders career all the way into his evolution as a negotiator, where he picked up tips from his colleagues as well as former FBI negotiator Chris Voss, whose book Minder read and who Minder now texts regarding negotiating tactics.

However, what Minder was dealing with talking someone on another continent down off their opening offer does not conform to the standards that negotiating dogma relies on.

They rely on the ability to see my opponent or hear them so eye contact, body language, tone. Thats not true here, Minder said.

And its not just that millions of dollars are being discussed via keyboard.

It also assumes that theres some asymmetry to the leverage. Not true. Bad guy has almost all the leverage. Especially if they took a copy of your financials. Cant even lie about how much money you have.

Then theres the most basic of differences.

It assumes you speak the same language, Minder said. Not true.

As Minder adapted the craft with, as he often credits, help from others at his company the work he was doing drew interest from the Harvard Negotiation Project, which is more or less exactly what it sounds like.

Minder worked with the Harvard Negotiation Project on translating that analog field of study into a digital world. The effort culminated in a presentation Minder did with Voss, the ex-negotiator whose book Minder read when he was starting out.

KARMA AND THE WESTERN SLOPE

Minder believes both that you get out of the universe what you put into it and that BMW produces some of the finest motorcycles around.

While those principles have little in common, Minder is living them both in Grand Junction, having left his GroupSense headquarters outside of Washington D.C. during the pandemic.

We had this amazing office. Such a bummer, Minder said of the Ballston, Virginia location. Super startup-y with the concrete floors and all that.

After enough days skateboarding around an empty office, Minder mentioned on a conference call that he was moving west, possibly Arizona. Thankfully for the Grand Valley, GroupSense Chief Operating Officer Kelly Milan had just added another property to his Grand Junction real estate portfolio, and he was looking to rent it out.

I was like, give me the keys. And that was it. And I still rent that house, Minder said.

After the move, Minder needed a few things that his home office didnt yet afford and in that, Marshall, the CMU president, saw opportunity.

It started with, he needed a room for a zoom call, Marshall said. And the president was happy to oblige, hoping that the right background and a goodbye from Grand Junction and CMU, send off from the conference call might get the Mavericks in front of a bigger tech audience.

It started as a cheap publicity stunt and just kind of grew, Marshall said.

What its grown into is a partnership for a long-running GroupSense effort. Minder is looking to park the philanthropic arm of his work, dubbed GoodSense, in Grand Junction and Colorado Mesa University is ready to help.

The 501c3 non-profit paperwork for GoodSense is now wending its way through the system, but the spirit of providing pro bono help on cyber security matters has a track record at Minders company.

Were all very altruistic in nature, Minder said, adding that staffers at GroupSense will bring up different organizations or groups to help and be empowered to do so. Essentially, GoodSense will formalize that effort and allow Minder and his colleagues to continue helping out small organizations, something hes already started to do through some relationships in Grand Junction.

And Minder builds these relationships quickly. He has a knack for getting to know people he doesnt just know who he might see on a motorcycle trip to Gateway, but also how many miles theyve got on their Indian Chieftain and has already provided some help for companies and organizations in Grand Junction.

Cyber security changes quickly and Minder doesnt scoff at those who arent sufficiently protected because, he says, the scope of the problem is such that no one person could be expected to stay on top of it.

Fortunately, he thinks theres some low-hanging solutions to the issue that dont involve FBI investigations or international diplomacy.

A common refrain about cybersecurity is to describe it as a war, which Minder says is only partially true.

Its kind of a weird war. The bad guys have a bunch of spears, and theyre going to throw the spears at us, and we have a bunch of shields on the ground.

Much like the axiom that most burglaries are crimes of opportunity targeting unlocked houses or cars left running in the driveway cybercrimes go after easy targets and picking up the shields in Minders metaphor is a good place to start.

Eventually theyd run out of spears or theyd throw spears at someone else, Minder said.

GoodSense will help do that. The idea melds the acumen and resources of GroupSense with the talent pool at CMU to create a nonprofit that can scale up to help Main Street America become as savvy to the perils of the online world as Fortune 500 companies have.

Were going to provide ransomware (help) but also cyber hygiene instruction and services for small businesses that meet a certain criteria for free, Minder said, adding that the board of the nonprofit will range from Grand Junction locals to big names in the cyber security industry.

The nonprofit organization creates enormous potential for CMU and Grand Junction, from protecting local businesses from dubious emails all the way up to a pipeline of future cyber experts graduating from CMU.

Marshall, who is used to partnering with experts across industry, said an opportunity like this is difficult to fathom for a place like CMU.

To state the obvious, Kurtis doesnt really need us, Marshall quipped.

But for Minder, a believer in karma, the priority is the same whether its a $10 million negotiation for a top client or creating an opportunity for a junior in college.

Hes just trying to help.

Read the rest here:
Grand Junction man negotiates with ransomware bad guys' - The Grand Junction Daily Sentinel