[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz56JsimakezNdBy-aeOT8OZK8xt5NwZTW2OK1QKmeUo":3},{"article":4,"iocs":36},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":25},"d440c52c-7f10-4c99-8d30-45198dbb7201","A Ransomware Negotiator Was Working for a Ransomware Gang - Schneier on Security","a-ransomware-negotiator-was-working-for-a-ransomware-gang-schneier-on-security-fd21bd","Someone pleaded guilty to secretly working for a ransomware gang as he negotiated ransomware payments for clients.","A ransomware negotiator has pleaded guilty to secretly working for a ransomware gang while simultaneously negotiating payments on behalf of victims. This represents a significant breach of trust and highlights the insider threat risk within the ransomware ecosystem. The case underscores how threat actors can infiltrate legitimate security services to gain intelligence and manipulate negotiations.","Ransomware negotiator pleads guilty to secretly working for the gang he was supposed to oppose.","A Ransomware Negotiator Was Working for a Ransomware Gang Someone pleaded guilty to secretly working for a ransomware gang as he negotiated ransomware payments for clients. Tags: cybercrime, ransomware Posted on May 1, 2026 at 7:18 AM • 2 Comments","https:\u002F\u002Fwww.schneier.com\u002Fblog\u002Farchives\u002F2026\u002F05\u002Fa-ransomware-negotiator-was-working-for-a-ransomware-gang.html",null,"2026-05-01T11:18:55+00:00","2026-05-01T12:00:05.136+00:00",8,[18],{"name":19,"type":20},"Unnamed ransomware gang","threat_actor","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":21,"icon":13,"name":23,"slug":24},"Ransomware","ransomware",[26,31],{"category":27},{"id":28,"icon":13,"name":29,"slug":30},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":32},{"id":33,"icon":13,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]