Florida man Angelo Martino has been sentenced to greater than 5 years in jail for conspiring with hackers to deploy ransomware throughout his job as a ransomware negotiator for a U.S. cybersecurity firm.
The U.S. Division of Justice confirmed the sentence on Thursday, noting that the federal government seized greater than $10 million price of cryptocurrency and property. Martino allegedly purchased these property, which embrace a meals truck and a luxurious fishing boat, with cash stolen within the hacks.
Martino is the third individual to be jailed for the scheme, following the sooner incarceration of cybersecurity professionals Kevin Martin and Ryan Goldberg. The trio, prosecutors say, worked together to deploy the BlackCat ransomware towards firms in the US all through 2023. In a single profitable assault, the cyber professionals moonlighting as criminals extorted an organization for about $1.2 million, which they then cut up 3 ways after laundering the funds.
The investigation highlights a uncommon case of safety professionals working for malicious hackers whereas on the job. Governments have lengthy suggested victims of hacking and extortion to not pay any ransom and forestall cybercriminals from profiting, though some firms do so anyway in attempts to prevent their prospects’ non-public knowledge from being leaked.
Extortion assaults have helped create a complete insurance coverage sub-sector within the U.S. for responding to ransomware and extortion assaults. Some firms on this house make use of negotiators to attempt to convey down the price of ransoms.
BlackCat (also referred to as ALPHV) is a ransomware-as-a-service operation that permits impartial hackers, often known as associates, to lease entry to the gang’s file-encrypting malware in alternate for a reduce of the income from cyberattacks.
The group’s ransomware was famously used to steal highly sensitive medical and billing data of more than 192 million people in America throughout a hack at U.S. well being know-how big Change Healthcare in February 2024, although the affiliate hackers accountable for the 2024 knowledge breach had been by no means recognized.
Once you buy via hyperlinks in our articles, we may earn a small commission. This doesn’t have an effect on our editorial independence.
