affiliate news
3 stories
Rogue ransomware affiliate poses as recovery firm to steal payments
A suspected ransomware affiliate is reportedly posing as a recovery service called "Ransom Busters," contacting victims of cyberattacks before the incidents become public. This group claims to possess decryption keys and the ability to delete stolen data for a fee, ranging from $20,000 to $60,000.
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
A new entity calling itself "Ransom Busters" has reportedly begun contacting victims of ransomware attacks, asserting that it has successfully breached the servers of various ransomware groups. Ransom Busters is subsequently offering to delete the data stolen by these ransomware groups for a fee, which reportedly ranges from $20,000 to $60,000. This development introduces a novel layer to the…
Ransomware Affiliate Sabotages Own Attack During EDR Evasion
A recent ransomware attack by an affiliate of the Akira group reportedly failed to encrypt a victim's files after the attacker's attempt to disable security tools backfired. The incident, which occurred in early August, involved the attacker rebooting the victim's system into Safe Mode, a tactic that ultimately prevented the ransomware payload from executing successfully.