Ex-Ransomware Negotiator Betrays Clients for Profit

Angelo Martino, a former ransomware negotiator, has admitted to aiding cybercriminals in their extortion schemes. Martino, who was employed by cybersecurity firm DigitalMint, pleaded guilty to charges including extortion. He confessed to working with the ALPHV/BlackCat ransomware group, providing them with sensitive victim details and negotiation tactics.

Prosecutors stated that Martino's objective was to increase the ransom payments obtained by the criminals, for which he received a share. This marks the third instance within the past year where a ransomware negotiator has faced legal consequences for a comparable offense.

Martino's betrayal involved feeding confidential information back to the ransomware operators, significantly compromising his clients' security and negotiation positions. He now faces a potential prison sentence of up to 20 years. Authorities have also confiscated approximately $10 million in assets linked to Martino.

During a six-month period in 2023, Martino collaborated with former colleagues Kevin Tyler Martin and Ryan Clifford Goldberg to deploy ALPHV/BlackCat's ransomware against U.S. victims. This collaboration effectively positioned them as affiliates of the ransomware gang, generating substantial profits, including over $1.2 million from a single victim.

DigitalMint has stated that the company was unaware of Martino's illicit activities and terminated the employment of both Martino and Martin upon learning of the accusations. Separately, international law enforcement efforts in 2023 led to the seizure of ALPHV/BlackCat's dark web leak site and the release of a decryption tool for hundreds of victims.