Scammers pose as ransomware recovery agents, but just go on to steal more from victims
- GuidePoint observed “Ransom Busters” posing as recovery firms in ransomware incidents
- Group claimed to hack RaaS panels, offering decryption keys for $20K–$60K
- Researchers say it’s likely the same affiliates behind infections, not genuine rescuers
Ransomware operations have evolved again, and this time around the crooks are pretending to be the good guys.
Cybersecurity researchers GuidePoint Security were recently brought in to respond to multiple ransomware attacks against their clients. In some of those incidents, the victims were also contacted by a group calling themselves “Ransom Busters”, which offered to delete the stolen files from the attackers’ servers, while providing the victims with working decryption keys.
What made the offer suspicious was the fact that Ransom Busters reached out to the victims before the attackers had gone public. The crooks claimed to have hacked into the admin panels of multiple Ransomware-as-a-Service (RaaS) operations, including DragonForce, Settra, and Anubis, giving them not...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
