Ransomware negotiator who scammed victims gets 70-month sentence
Mediator colluded with hackers to defraud companies of $75 million in ransom schemes.
1Breach of fiduciary trust
Angelo Martino, while serving as a ransomware negotiator for victim companies, conspired with the BlackCat hacker group to leak clients' sensitive information. Using these details, he attempted to increase ransom demands, playing a role in a $75 million fraud scheme that exploited corporate vulnerabilities.
2Extensive fraud network
Martino's criminal network targeted five victims, including a medical device manufacturer and non-profit organizations. The victims were forced to pay ransoms ranging from $213,000 to $26.8 million, with total damages exceeding $75 million, showcasing the scale of this coordinated cybercrime operation.
3Justice served
Facing up to 20 years in prison, Martino received a 70-month sentence. Post-release, he must pay 10% of his earnings as victim restitution. Authorities have already seized $10 million in assets connected to the scheme, demonstrating law enforcement's commitment to combating cyber-enabled financial crimes.
4BlackCat's operation model
Also known as ALPHV, BlackCat conducted major cyberattacks in 2023, including one that disrupted MGM Resorts. The FBI's decryption tool saved over 500 victims from paying $68 million in ransoms. A $10 million bounty has been offered for information leading to the group's administrators.
5DigitalMint's position
Martino's employer DigitalMint claims full cooperation with investigators and no prior knowledge of the fraud. The company failed to prevent its negotiator's betrayal, highlighting critical gaps in third-party vendor oversight for sensitive cybersecurity services that require absolute trust.
6Cybersecurity lessons
This case underscores the need for companies to reassess cyber resilience strategies, particularly in vetting third-party negotiators. FBI officials called Martino's betrayal of represented victims 'among the most egregious in cybercrime history,' serving as a stark warning about insider threats in digital extortion scenarios.
Original article: Engadget — Fiducier dolandırıcılığı yapan ransomware arabulucusuna 70 ay hapis