US charges another ransomware negotiator linked to BlackCat attacks
Summary
The U.S. Department of Justice has charged a former DigitalMint employee for allegedly participating in an insider scheme. This scheme involved ransomware negotiators secretly collaborating with the BlackCat (ALPHV) ransomware operation.
IFF Assessment
FOE
This development indicates that even individuals involved in negotiation and potentially supposed to help victims are colluding with ransomware groups, making the fight against ransomware more challenging.
Defender Context
This case highlights the ongoing threat of insider collusion with ransomware groups, which can undermine victim response efforts. Defenders should be aware of the potential for dual-hatted individuals within organizations and strengthen internal controls to prevent such compromises.