Ransomware Negotiator Sentenced for BlackCat Ransomware Operators to Attack Victims
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
A former Florida ransomware negotiator has been sentenced to 70 months in federal prison after conspiring with BlackCat\/ALPHV ransomware<\/a> operators and helping attack multiple U.S. victims.<\/p>\n Angelo Martino, of Land O\u2019Lakes, Florida, worked for a U.S.-based cyber incident response company. His role was to help organizations recover from ransomware incidents and negotiate with threat actors.<\/p>\n Instead, prosecutors said he abused his access to confidential client information to assist the same cybercriminals targeting those victims.<\/p>\n According to the U.S. Department of Justice<\/a>, Martino began working with BlackCat actors in April. He reportedly gave the ransomware group sensitive details about victims\u2019 negotiation strategies, financial positions, and planned ransom responses.<\/p>\n This intelligence enabled the attackers to increase pressure on victims and seek higher payments. The BlackCat ransomware operation, also known as ALPHV, operated as a ransomware-as-a-service<\/a> platform.<\/p>\n Its developers supplied malware and infrastructure to affiliates, who conducted network intrusions, stole data, encrypted systems, and demanded cryptocurrency payments.<\/p>\n The group became one of the most disruptive ransomware operations targeting organizations worldwide. Martino also conspired with Kevin Martin of Texas and Ryan Goldberg of Georgia, both former cybersecurity professionals.<\/p>\n Between April and November, the three men deployed BlackCat ransomware<\/a> against additional U.S. organizations. Prosecutors said they successfully extorted one victim for approximately million in Bitcoin.<\/p>\n The conspirators split their share of the ransom payment into three portions. They used various methods to launder the cryptocurrency proceeds.<\/p>\n Martino pleaded guilty on April to one count of conspiracy to interfere with interstate commerce through extortion. Martin and Goldberg were previously sentenced to months in prison on May.<\/p>\n Law enforcement has seized more than million in assets linked to Martino. The seized property includes digital currency, vehicles, a food truck, and a luxury fishing boat.<\/p>\n Authorities said the assets were acquired through proceeds from the extortion scheme. A restitution hearing is scheduled for September. The case highlights an insider threat that can emerge during ransomware response efforts.<\/p>\n Incident response providers often receive highly sensitive information, including ransom affordability assessments, insurance details, recovery plans, internal communications, and negotiation limits.<\/p>\n Unauthorized disclosure of that information can directly improve an attacker\u2019s ability to extort a victim. The FBI Miami Field Office led the investigation with support from the U.S. Secret Service.<\/p>\n The prosecution is part of Operation Riptide, an FBI campaign focused on cybercrime actors, infrastructure, financial networks, and fraud operations. The Justice Department previously disrupted BlackCat\u2019s infrastructure in December<\/a>.<\/p>\n During that operation, the FBI developed a decryption tool that helped hundreds of victims restore encrypted systems and reportedly prevented approximately million in ransom payments.<\/p>\n Stop Accepting SLAs Written for 2019 SOCs \u2013 Here\u2019s the 2026 AI SLA Vendor<\/strong> Checklist<\/strong> \u2013 Download Free AI SOC SLA <\/strong>Guide<\/a><\/strong><\/p>\n The post Ransomware Negotiator Sentenced for BlackCat Ransomware Operators to Attack Victims<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\nBlackCat Ransomware Negotiator Sentenced<\/strong><\/h2>\n