logo

Ransomware negotiator investigated over criminal gang kickbacks

ID: 8f2fba1d-1be6-5deb-a972-786a0ac51b63

STIX ID: report--8f2fba1d-1be6-5deb-a972-786a0ac51b63

Feed Name: Malwarebytes Blog

Threat Score
50/100

Date Published: 2025-07-08

Date Updated: 2026-04-28

...
...

The article describes allegations that a former employee at Digital Mint — a company that negotiates ransomware demands on behalf of victims — worked with ransomware criminals to profit from extortion payments; the firm is cooperating with a US Department of Justice probe and the employee has been dismissed. The piece contextualizes the role of negotiators, concerns about conflicts of interest and fraud, historical examples of recovery firms secretly paying attackers, and official guidance (CISA/NSA/FBI) warning that paying ransoms is unreliable and risky.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.