> Thieves must be heartless to go after such desperate targets.

I mean it's the mafia, same people that traffic women and children, drugs,... profit is the motive, they don't care how. Just because they are now sitting behind a computer doesn't change their nature.

I've been in a hospital recently and they were still running windows XP, my doctor using IE8 (cause activeX on the intranet) and Excel... But hey, they run anti-viruses!... Public institutions absolutely need to get rid of all that ASAP.

Lookup these Internet scammers videos on YouTube. These scammers are heartless. They terrorise old people when they don't comply, claim they are calling the police (on the victim for not paying fake invoices), even playing police siren sounds in the background. If they could scam a hospital they would in a heartbeat.

>but the negotiation for keys happens between real people

I would be surprised if no one has written a smart contract for this yet - release the keys when X BTC are deposited to address Y.

Most enterprise ransomware payments involve actual negotiation/haggling on the price, timing, release of stolen data, etc.

How would the smart contract be able to validate that the 'keys' it releases are authentic before-hand?

You don't know this when interacting with the human ransomware people either, doesn't seem like a requirement.

Yep, makes sense.

I thought this proposal was some kind of pitch to solve that specific problem, not just automate the process after receiving a payment.

I just misunderstood what the goal was

It wouldn't.

The smart contract would just wait for payment and the control server would watch for payments. the victim would still have to trust that this process was in place, but for operator can have it completely automated

doesn't actually have to be a smart contract, just any address essentially. but a smart contract could allow for many more features, not sure if you'd really want that here

I'm imagining that "keep this value secret until payment is made" could be handled entirely on the blockchain, so that there is no C&C to shut down. But I'm not actually that familiar with the capabilities and limitations of smart contracts.

ah okay, Secrets (formerly Enigma) is a crypto-payments smart-contracts technology to look into for this. Otherwise you run into the problem of everything being stored onchain and visible or there would always have to be some oracle system that has the secret. I'm not sure if Secrets solves this use case, their main thing is storing secrets in the encrypted-key co-processors client side, but they might have other offerings.

you can write the contract and always automatically get a cut if you get people to use it, no negotiations, no contracts, no incorporation - the overhead costs to making money have never been lower

people are talking themselves out of how to use cryptocurrency and smart contracts, its like something Plato would write