Ransomware incident responder gave info to BlackCat cybercriminals during negotiations, DOJ alleges

Ransomware incident responder gave info to BlackCat cybercriminals during negotiations, DOJ alleges

The Justice Department alleges incident responder Angelo Martino carried out multiple ransomware attacks and secretly aided the ALPHV/BlackCat group while working as a negotiator. Martino surrendered, was released on bond with a ban on cyber industry work, and prosecutors say he passed confidential negotiation details that helped secure multimillion-dollar ransoms, prompting DigitalMint to fire him and tighten oversight. #ALPHV #DigitalMint

Keypoints

  • Angelo Martino is accused of conducting at least ten ransomware attacks and colluding with ALPHV/BlackCat.
  • Prosecutors say he provided confidential negotiation information to co-conspirators to maximize ransom payments.
  • Martino, Ryan Goldberg, and Kevin Martin earned about $1.2 million from an attack on a Florida medical company; Goldberg and Martin pleaded guilty.
  • DigitalMint terminated the employees, assisted the DOJ investigation, and implemented audited cloud-based negotiation controls and oversight.
  • The case has provoked industry outrage and highlighted ethical risks around ransom negotiators and access to attacker tools.

Read More: https://therecord.media/ransomware-blackcat-doj-incident-responder