Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme
Summary
Zohar Pinhasi has been identified as running a ransomware recovery scheme where he would pay ransoms to obtain decryption keys. He then allegedly charged victims significantly more for these keys, marking up the costs by $11 million overall.
IFF Assessment
FOE
This article details a fraudulent scheme that exploits victims of ransomware, representing a negative development for defenders who must contend with both the initial attack and subsequent deception.
Defender Context
This incident highlights a sophisticated criminal enterprise that capitalizes on ransomware victims' desperation. Defenders need to be aware of such recovery scams, as attackers may not only steal data but also attempt to extort victims further through fraudulent remediation services.