US Bank investigates LockBit's claims as ransomware crims set pay-or-leak deadline
Follow the money
A threat actor calling itself Ransom Busters is contacting ransomware victims via email, claiming to have compromised ransomware operators' servers and offering to delete stolen data for fees between $20,000 and $60,000. The group presents itself as a recovery service, though security researchers flagged this approach as highly suspicious and anomalous. This represents a novel extortion vector where attackers exploit victims' vulnerability following ransomware incidents.
Read full article at The Hacker News ↗Follow the money
Because apparently even ransomware gangs can't trust the people they do business with
These companies often have the hardest time balancing their roles as suppliers and customers, according to the risk management firm Black Kite.
The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter