Cybersecurity pros admit to moonlighting as ransomware scum

Two cybersecurity professionals and a co-conspirator pleaded guilty to conspiring to deploy ALPHV/BlackCat ransomware against five U.S. victims from May–November 2023, including a medical device company that paid approximately $1.2M in bitcoin; the defendants had agreed to remit 20% of ransoms to ALPHV operators and attempted to launder proceeds. Sentencing is scheduled for March; the case highlights insider misuse of security skills and continued activity/impact associated with the ALPHV/BlackCat ransomware family.