Ransom Busters Allegedly Hacks Ransomware Servers, Demands Payment from Victims

A ransomware affiliate known as Ransom Busters claims to have hacked ransomware servers to delete stolen data, demanding payments between $20,000 and $60,000 from victims. Analysis reveals shared tools and techniques, indicating a possible single operator rather than a legitimate group.

A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from ransomware groups' servers in exchange for a fee ranging from $20,000 to $60,000.

"In these messages, the third-party offers to help the victim recover from ransomware attack. This immediately stands out as anomalous," GuidePoint Research

Read original article