惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

小众软件
小众软件
博客园_首页
博客园 - 聂微东
T
Tailwind CSS Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
J
Java Code Geeks
The Cloudflare Blog
aimingoo的专栏
aimingoo的专栏
Martin Fowler
Martin Fowler
D
Docker
人人都是产品经理
人人都是产品经理
WordPress大学
WordPress大学
博客园 - 三生石上(FineUI控件)
Microsoft Azure Blog
Microsoft Azure Blog
Recent Announcements
Recent Announcements
Apple Machine Learning Research
Apple Machine Learning Research
阮一峰的网络日志
阮一峰的网络日志
B
Blog RSS Feed
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Microsoft Security Blog
Microsoft Security Blog
L
LangChain Blog
Jina AI
Jina AI
博客园 - Franky
D
DataBreaches.Net

Latest from TechRadar in Security

Robots are fighting wars and helping to quash riots — China is arming riot police with squads of AI controlled drones and Ukraine wants to man the frontlines with 25,000 robots US security agency still using Mythos despite ban – government using new security tool despite Pentagon's… Struggling to launch Teams? Microsoft recalls update causing failed startup and infinite loading loops –… How to meaningfully measure the effectiveness of cyber resilience 'We've identified a security incident': Vercel breach confirmed after hackers claim stolen data for sale… How EU organizations can turn sovereign cloud theory into action 'Update immediately': 60,000 WordPress websites at risk after experts discover flaw that allows hackers to… 'They mopped the floor with me and pulled every childish game they could': Disgruntled researcher releases second major Windows zero-day — claims Microsoft 'would ruin my life, and they did' 'As threats evolve, Gemini keeps our defenses one step ahead': Google claims its AI helped it block over 8.3… Cisco tells Webex users to patch critical security flaws immediately, as experts find its Wi-Fi boxes may be filling their disks with undeletable data every day Microsoft experts warn North Korean attackers target macOS users with 'a highly reliable infection chain' to steal passwords, financial data and more — here's how to stay safe Solving the shadow IT crisis in travel Agentic swarms will change how everyone uses AI – but how can organizations deploy them securely? Europol launches Operation PowerOFF — warns 75,000 DDoS users and takes down 53 domains China completes testing on ‘deep-sea electro-hydrostatic actuator’ capable of slicing undersea cables as deep as 3.5 kilometers – new compact subsea vessel testing bridges the ‘last mile’ and could deploy in 2026 Many are still leaving the door open': Security experts warn FIFA World Cup partners could be putting customers at… 'Anyone with $10 could have walked straight through': Report warns this legit-looking software is actually… An ancient Microsoft Excel security flaw could let hackers hijack your entire system, so patch now 'This is not a traditional coding error': Experts flag potentially critical security issues at the heart of Anthropic's MCP, exposes 150 million downloads and thousands of servers to complete takeover Your OpenClaw agents can empty your inbox and leak your data. Here's how to secure them Russia hits European thermal power plant in attempted ‘destructive’ cyberattack – Pro-Kremlin hackers are engaging in ‘riskier and more reckless behavior’ in latest attempt to cripple Western critical infrastructure The war in Iran is reaching cyberspace - here’s how to prepare Millions of hotel goers may have been exposed after hackers steal data and leak it on Telegram 'Every Apple user needs to know about this nasty scam': Fake warnings tell users their iCloud data will be… Dozens of WordPress plugins hijacked to target thousands of sites 'We are currently being extorted' — crypto giant Kraken says it is facing extortion attack, here's… McGraw Hill becomes latest to see its Salesforce data hacked Over 100 Chrome Web Store extensions found stealing user data from thousands of accounts OpenAI reveals its Mythos rival designed for cybersecurity pros When cyberattacks are inevitable, recovery becomes the strategy
Ransomware negotiator recruited by BlackCat ransomware ga...
Sead Fadilpa · 2026-04-23 · via Latest from TechRadar in Security
A pink triangle with a red exclamation mark inside on a blue digital landscape
(Image credit: Getty Images)

  • A Florida-based negotiator hired to assist ransomware victims secretly aided BlackCat attackers and even deployed ransomware himself
  • Prosecutors revealed he shared confidential client information, conspired with accomplices, and laundered over $1 million in Bitcoin
  • All three defendants pleaded guilty, with sentencing dates set for mid‑2026 and potential prison terms of up to 20 years

A cybersecurity professional hired by ransomware victims to negotiate with the attackers, admitted to actually helping the threat actors, as well as to deploying ransomware himself, it was reported earlier this week.

According to a press release published by the US Department of Justice, Angelo Martino, 41, of Land O'Lakes, Florida, was hired in 2023 by five different companies to help negotiate the release of the decryption key and stolen files, with the operators of the infamous BlackCat ransomware.

Instead of doing that, Martino shared sensitive insider information with the crooks, helping them maximize their demands:“Martino provided BlackCat attackers with confidential information about the negotiating position and strategy of his company’s clients without the clients’ or his employer’s knowledge or permission,” the DOJ said. “This confidential information assisted the ransomware actors and maximized the ransoms that the victims were required to pay. The confidential information included the victims’ insurance policy limits and internal negotiation positions.”

Article continues below

Looking at 20 years of jail time

Martino was awarded for his efforts by the BlackCat gang.

This is the latest development in the case that was first reported in November 2025. Back then, a US federal indictment was filed in the Southern District of Florida against two defendants - Ryan Clifford Goldberg of Georgia, and Kevin Tyler Martin of Texas, and a third, unnamed co-conspirator (who we now know was Martino), stating that the trio hacked into company networks, stole data, encrypted it with ALPHV (BlackCat) ransomware, and demanded cryptocurrency ransoms.

At the time, it was reported that Martin and Martino both worked at DigitalMint, while Goldberg was a former Sygnia incident response manager.

Martino also admitted to conspiring with Goldberg and Martin to deploy BlackCat against multiple US-based victims, bringing in, and later laundering, roughly $1.2 million in Bitcoin. The DoJ said that so far it seized $10 million in assets from Martino, including digital currency, vehicles, a food truck, and a luxury fishing boat that Martino obtained through criminal activity.

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

All three pleaded guilty. Martin and Goldberg expect to be sentenced later this month, while Martino is scheduled to be sentenced on July 9, 2026. All three are facing punishment of up to 20 years in prison.

Via The Hacker News


Best antivirus software header

Google logo on a black background next to text reading 'Click to follow TechRadar'

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.


Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.