'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service

Summary

A ransomware affiliate, operating under the guise of 'Ransom Busters,' is attempting to deceive victims into believing they are an incident recovery service. This tactic aims to trick victims into paying the ransom to the affiliate instead of the actual ransomware group, thereby diverting funds and potentially compromising the recovery process.

Entities