As cited
Copy frozen at (site build).
ransomware
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service
A ransomware affiliate is impersonating an incident-recovery service to contact victims and redirect ransom payments to the attacker instead of legitimate payment channels. The threat actor exploits victims' trust in recovery professionals during crisis response.
Why it matters: Organizations paying ransoms or negotiating with attackers may send funds to fraudulent accounts; verify all recovery service communications and intermediaries before making any payments.
- Source published
- First seen by Cybersecurity Tracker