MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
Summary
The U.S. Department of Justice has charged Zohar Pinhasi, owner of MonsterCloud, with defrauding ransomware victims. Pinhasi is accused of secretly paying ransoms to attackers to decrypt data while falsely claiming to use proprietary tools for recovery, allegedly billing victims over $19 million.
IFF Assessment
This news is bad for defenders because it reveals a sophisticated scam where a service provider allegedly exploited ransomware victims, potentially prolonging attacks or hindering legitimate recovery efforts.
Defender Context
This incident highlights the importance of due diligence when selecting cybersecurity service providers, especially those offering ransomware recovery. Defenders should be wary of companies that make extraordinary claims about their recovery methods and ensure transparency in their dealings. This case underscores the potential for bad actors to operate within the cybersecurity space, posing a threat to victims.